Hackers targeting Atomic and Exodus wallet users with malicious software to steal private keys

From Cointelegraph

April 10, 2025 2:05 pm:

Hackers are targeting users of Atomic and Exodus wallets with malicious software packages to steal crypto private keys, cybersecurity researchers warn. The exploit hides in legitimate npm software packages, compromising wallet files to trick users into sending crypto to scam addresses. These attacks highlight the growing threat to crypto holders from supply chain attacks.

Crypto hacks in Q1 2025 cost the industry $2 billion, with the largest chunk coming from the $1.4 billion Bybit hack. SafeWallet’s post-mortem analysis revealed that hackers compromised a developer’s computer to orchestrate the attack. Cypherpunk Jameson Lopp raised concerns about BTC address poisoning attacks, urging vigilance among users.

Address poisoning attacks deceive victims by generating similar destination addresses and sending small transactions to trick users into sending funds. Cyvers estimates that these attacks stole $1.2 million in March 2025 alone. This highlights the need for users to carefully verify transaction details to avoid falling victim to such scams.

Read more at Cointelegraph: Atomic, Exodus wallets targeted in new cybersecurity exploit