CYFIRMA Research- SeedSnatcher: Dissecting an Android Malware Targeting Multiple Crypto Wallet Mnemonic Phrases

Mobile Threat Alert: Crypto Mnemonic Phrase Stealer

SeedSnatcher is a newly uncovered Android malware family targeting the crypto ecosystem, built to steal users’ mnemonic recovery phrases using a sophisticated DisplayOverlay attack

Capabilities:

• Intercepts and exfiltrates seed phrases and private keys from major cryptocurrency wallets
• Presents deceptive wallet-import screens to lure users into entering their recovery phrases
• Communicates with its command-and-control servers via encrypted WebSocket channels

Additional Capabilities:

• Access device files and media
• Read SMS content and monitor messages
• Retrieve call logs and contact lists
• Collect device identifiers, network data, and app details
• Exfiltrate collected information to the C2 over encrypted channels

Link to the Research Report: SEEDSNATCHER : Dissecting an Android Malware Targeting Multiple Crypto Wallet Mnemonic Phrases - CYFIRMA

#CyberSecurity #MobileSecurity #AndroidMalware #CryptoSecurity  #ThreatIntelligence #SeedSnatcher #ThreatAlert #CYFIRMA #CYFIRMAresearch#ExternalThreatLandscapeManagement #ETLM

https://www.cyfirma.com/