Litecoin targeted by trojan malware

A security firm has published a report showing malware aimed at stealing Litecoin wallet files.

AccessTimeIconJul 5, 2013 at 6:02 p.m. UTC
Updated Sep 10, 2021 at 11:25 a.m. UTC
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global hub for everything crypto, blockchain and Web3.Register Now

ESET, a security firm, has published a report showing that there is a piece of malware aimed at stealing Litecoin wallet files. ESET says that the Trojan, named MSIL/PSW.LiteCoin.A, is not widespread just now, and extremely unsophisticated. The report suggests that this malware or others like it could become more prevalent if Litecoin enjoys a wider adoption and popularity.

Bitcoin has already been the target of malware attacks. For example, Win32/Delf.QCZ will, among other things, install bitcoin mining software on the target computer, and have it join a network of zombified mining PCs. There have also been cases where a bitcoin wallet was stolen.

This is the first time that malware has been targeted at Litecoin users. ESET describes the Trojan as extremely unsophisticated, and that its only function is to send the user's wallet.dat file to an FTP server, which the attacker controls. ESET showed the decompiled C# program – a mere 38 lines of code.

ESET say that the provider of the FTP server used by the attacker has been informed. The provider has now blocked requests to the server, and redirects browsers to a page that reads:

User **** from BTC-E exchange uses this ftp address to steal wallets from cryptocoiners! BEWARE!!!!

The report did not comment on MSIL/PSW.LiteCoin.A's attack vectors – i.e. the methods of infection. While firewalls and antivirus are useful, security experts generally say that your behaviour is the first line of defence against malicious software. Specifically, never open email attachments you weren't expecting, don't click on unsolicited links on social networks, and if you have to click links in emails at least use the browser or email program's status bar to actually see where the link points to.


Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.

Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to to register and buy your pass now.