Security company: Malware OkoBot steals encrypted wallet mnemonics

According to Bits.media, Kaspersky security researchers have discovered new malware OkoBot that steals encrypted wallet mnemons and credentials through about 20 modules. Attackers use ClickFix social engineering technology to trick users into running malicious commands and spread them through GitHub repositories disguised as legitimate tools such as SQLServerManagementStudio. OkoBot's modules include: SeedHunter injects hardware wallets such as Trezor and Ledger, which displays a fake interface when recovering mnemonic words;MCKeylogger records keyboard and clipboard activity; and OkoSpyware tracks wallet passwords and records window videos.