Cyber experts warn of new Google Chrome, Microsoft Word money-stealing malware

A new and sophisticated malware that impersonates Google Chrome and Microsoft has the potential to steal money from Microsoft device owners, cyber experts warn.

Since March, online protection firm Proofpoint has flagged an ongoing nefarious campaign, seeing “cybercriminal threat actors adopting new, varied, and increasingly creative attack chains.”

This month, Proofpoint identified a larger distribution of the malware. It poses as fake updates in internet browsers like Chrome and mimics programs like Microsoft Word — all to coerce users into downloading a harmful series of code.

From there, the delayed, Trojan Horse-esque attack gets access to cryptocurrencies and to sensitive files and personal information.

Often, a pretend update prompt will pop up on Google Chrome through a “compromised website” with a clipboard message to “copy the code” provided. It then instructs personal computer owners to open PowerShell — a Microsoft program for scripts — and self-paste in the malware.

From there, the “hijacker” can gain access to the victims’ cryptocurrency.