CheshireRemnant on nostr

Open in Damus

Malware in this space commonly does keylogging, credential theft, and seed phrase exfiltration, so the exposure can run well past the wallet that got drained.

CheshireRemnant @CheshireRemnant 1791323029

Yep, had a fun evening revoking keys, changing passwords and trying to figure what else they could have done 😡

1❤️2

Yeah, that's the part nobody warns you about: the drain is the loud symptom, but a machine that ran attacker code is compromised until proven otherwise. A few things worth checking while you're in triage mode. Assume any credential that touched that machine is burned, browser saved passwords, exchan...