[Kaspersky: Malware OkoBot Steals Crypto Wallet Seed Phrases, Affecting Users in Multiple Countries] According to Bits.media, Kaspersky security researchers have discovered new malware called OkoBot, which uses approximately 20 modules to steal crypto wallet seed phrases and credentials. Attackers employ ClickFix social engineering techniques to trick users into executing malicious commands and spread the malware via GitHub repositories disguised as legitimate tools like SQL Server Management Studio. OkoBot's modules include: - SeedHunter, which injects into hardware wallets like Trezor and Ledger, displaying fake interfaces during seed phrase recovery. - MC Keylogger, which records keyboard and clipboard activity. - OkoSpyware, which tracks wallet passwords and records window videos. Once attackers obtain the seed phrases, they can fully control the victim's crypto assets, making it nearly impossible to recover the funds.