Friday, October 23, 2026

Malicious Hackers Selling Malware’s Targeting Bitcoin ATMs in the Dark Web Forums

As the popularity of cryptocurrencies increases attackers shifted the threat landscape cryptocurrencies, they try to exploit all the possible methods to mine and steal cryptocurrencies.

Security researchers from Trend Micro spotted Bitcoin ATM malware through underground forums that allow the user’s to steal bitcoins worth up to 6,750 in U.S. dollars. The malware sold by the dark web user or US$25,000.

Bitcoin ATM

Bitcoin ATM differs from the traditional ATM, it does not connect to a bank account, instead, it connects to the cryptocurrency exchange platform’s that used to buy and sell the cryptocurrencies.

As of now there 3,500 bitcoin ATMs installed around the world, among that 74% in North America. Users can access these ATMs to access the wallets used to store digital currencies by scanning the wallet address or its QR code.

Source : coinatmradar

Bitcoin ATM malware

Researchers spotted an established user offering Bitcoin ATM malware for sale in the underground forums that include the ready-to-use card with EMV and NFC payments support.

The malware is designed to exploit a service vulnerability that allows the user’s to receive bitcoins worth up to 6,750 in U.S. dollars. the seller advertised as “operation does not require any physical access and can be maintained as a normal purchase. Includes the multilanguage manual and Jabber support”

With further analysis, it reveals that the seller offers ATM malware at a regular basis and details on how the malware works and how to exploit the vulnerability.

Also, the researchers spotted the seller offers a range of financial-related malware and compromised accounts and keep on expanding his waves.

Since the start of 2018, those with one eye on the crypto world have noted one thing: coin hacks are becoming more common. As Bitcoin’s value raced towards the $10,000 mark towards the end of 2017, the risk/reward ratio for cybercriminals was too great to ignore.

Since from the start of 2018, the coin hacks are becoming more common. The Bitcoin’s value reached $10,000 mark towards the end of 2017 increases the ratio for cybercriminals was too great to ignore.

Also Read:

Hackers using .NET Malware Called “Evrial” to steals Bitcoins by Abusing the clipboard

North Korean Hacking Group “Lazarus” Targeting Banks & Bitcoin Users Via Sophisticated Malware

New Clipboard Malware Monitors the Windows Clipboard for Cryptocurrency Addresses and Replace its Own Address

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Hot this week

How To Access Dark Web Anonymously and know its Secretive and Mysterious Activities

What is Deep Web The deep web, invisible web, or...

How to Build and Run a Security Operations Center (SOC Guide) – 2023

Today’s Cyber security operations center (CSOC) should have everything...

Russian Hackers Bypass EDR to Deliver a Weaponized TeamViewer Component

TeamViewer's popularity and remote access capabilities make it an...

Web Server Penetration Testing Checklist – 2026

Web server pentesting is performed under three significant categories: identity,...

ATM Penetration Testing – Advanced Testing Methods to Find The Vulnerabilities

ATM Penetration testing, Hackers have found different approaches to...

StealC Infostealer Returns as Powerful Remote Access Trojan After Europol Takedown

StealC’s seller has resurfaced with Stadia, a modular remote...

Critical Okta Access Gateway Vulnerability Enables Remote Command Execution

A critical command execution vulnerability has been identified in...

Critical HPE Aruba AOS-8 Flaw Allows Hackers to Bypass SSH Authentication and Take Over Systems

Hewlett Packard Enterprise (HPE) has addressed a critical authentication-bypass...

Capcom Confirms Data Breach Exposing 11.7 Million CAPCOM ID Records

Capcom has confirmed a data breach that affects 11,774,247...

Quest Diagnostics Confirms Cyberattack Exposing Patient Records in Quanum System

Quest Diagnostics disclosed unauthorized access to its Quanum LSM...

Unauthorized AI Agents Found Accessing Customer Accounts at Major U.S. Banks

U.S. banks face challenges as third-party artificial intelligence agents...

SBI Notifies Customers Affected by Recent Cybersecurity Incident

The State Bank of India (SBI) has individually notified...

Related Articles

Recent News