This AI-powered malware has evolved to add image recognition
Hackers can now steal people’s cryptocurrency wallet seed phrases, even when they are stored as an image file, experts have warned
When a user sets up a new crypto wallet, they get a “seed phrase” – a set of 12 or 24 random words, which can later be used to restore the wallet in a new app or device (in case of loss or theft). Crooks that happen to steal a seed phrase can manage the money found in the wallet however they like.
But when a person saves the seed phrase in an image file (for example, with a screenshot), it makes the criminals’ job that much harder.
A highly potent threat
Enter Rhadamanthys version 0.7.0, recently introduced and carrying new, important bells and whistles. Recorded Future’s Insikt Group recently analyzed this new version and released an in-depth report, which states that the infostealer now comes with Artificial Intelligence (AI) capabilities, and allows for optical character recognition (OCR).
Together, these two tools are called “Seed Phrase Image Recognition” which, in the above context, is pretty self explanatory.
“This allows Rhadamanthys to extract cryptocurrency wallet seed phrases from images, making it a highly potent threat for anyone dealing in cryptocurrencies,” Recorded Future’s Insikt Group said in its analysis. “The malware can recognize seed phrase images on the client side and send them back to the command-and-control (C2) server for further exploitation.”
Even before the new features, Rhadamanthys was a potent, and popular infostealer. It was first discovered back in 2022, and has since grown into one of the most formidable pieces of malware. Hackers can subscribe to the service, paying $250 a month for the infostealer (or $550 for 90 days).
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
The latest version was released in June 2024, and comes as a “complete rewrite of both client-side and server-side frameworks, improving the program’s execution stability.” Recorded Future concluded.
Via The Hacker News
More from TechRadar Pro
Hackers can now steal people’s cryptocurrency wallet seed phrases, even when they are stored as an image file, experts have warned When a user sets up a new crypto wallet, they get a “seed phrase” – a set of 12 or 24 random words, which can later be used to…
Recent Posts
- How to watch Spain vs Iraq: Free Streams & TV Channels for World Cup 2026 warm-up match
- TSMC struggles to keep up with AI demand: ‘We can only support so much’
- We’re giving away a Prime Day grab bag loaded with over $800 of free tech
- Here’s what you should and shouldn’t plug into a TV USB port
- Amazon’s new Proteus warehouse robot is fully autonomous
Archives
- June 2026
- May 2026
- April 2026
- March 2026
- February 2026
- January 2026
- December 2025
- November 2025
- October 2025
- September 2025
- August 2025
- July 2025
- June 2025
- May 2025
- April 2025
- March 2025
- February 2025
- January 2025
- December 2024
- November 2024
- October 2024
- September 2024
- August 2024
- July 2024
- June 2024
- May 2024
- April 2024
- March 2024
- February 2024
- January 2024
- December 2023
- November 2023
- October 2023
- September 2023
- August 2023
- July 2023
- June 2023