Malware Drains $235K From Crypto Wallets in 48 Hours

A reported malware campaign has drained more than $235,000 from crypto wallets over the past 48 hours, according to allegations circulating in the market. The attack appears to involve a remote access trojan that hijacked active sessions, allowing unauthorized transfers from hundreds of wallets.

Investigators have not yet identified the initial infection vector. Session hijacking is the leading suspicion, but the lack of confirmed attribution leaves open questions about whether the compromise began through phishing, malicious downloads, browser extensions or another delivery method.

A separate scam tied to the same broader threat environment allegedly lured victims into building an “AI trading bot” using a YouTube tutorial. That tactic underscores how social engineering continues to evolve alongside crypto market narratives, especially where automation and artificial intelligence are used to create a false sense of technical legitimacy.

For traders and wallet holders, the immediate takeaway is operational rather than directional. The incident does not alter the macro trend for digital assets, but it does reinforce the need for stricter wallet hygiene, hardware-based key storage and tighter session controls. In a market still showing strong risk appetite, security failures can quickly become liquidity events for individual holders even when broader prices remain stable.