Kaspersky reveals a new malicious framework targeting cryptocurrency users with the use of OkoSpyware

Kaspersky Global Research and Analysis Team (GReAT) revealed insights about the new OkoBot campaign targeting cryptocurrency users. The new sophisticated framework employs TookPS to exfiltrate seed phrases and uses a new OkoSpyware module to monitor Chromium-based browsers and deploy various malware strains, including the Rilide stealer. It has already targeted hundreds of victims across over 25 countries, with the highest number of affected end users recorded in Brazil, Vietnam, Canada, Mexico