Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

CryptoJS.lib.ByteArray contains trojan horse

About: CryptoJS.lib.ByteArray

This script is loaded by the community cryptocurrency wallet https://mydashwallet.org/

The script was maliciously modified to send private key data to https://api.dashcoinanalytics.com resulting in the theft of a significant amount of user funds.

It appears to have been modified on May 13, 2019 to add the malicious code, according to this diff: https://greasyfork.org/en/scripts/6696-cryptojs-lib-bytearray/diff?v2=697850&v1=26274

Can you please take this script down, preserving any information on the account responsible for making the changes for possible action by law enforcement. I suspect the author's account was compromised, but our priority now is simply stopping the exploit.

Leon White
Dash Core Group

Comments

Sign In or Register to comment.