Malware is software designed to do harm: steal data, spy on you or take control of your device. It often gets onto a phone or computer without you noticing. For crypto owners the danger is especially high, because transactions on a BlockchainBlockchainA public ledger where transactions are grouped into blocks, each linked to the one before, so past records can't be altered without it showing. can't be reversed.
Malware that targets crypto
- Clipboard hijackers watch what you copy. When you copy a wallet addressWallet addressA string of letters and numbers you give out to receive crypto, much like a bank account number., they swap it for a scammer's address, so you paste the wrong one without noticing.
- Infostealers look for saved passwords, browser logins and files that might contain a seed phraseSeed phraseA list of 12 or 24 words that backs up every key in your wallet, so whoever has the words can restore the wallet and take the crypto., and send them to the attackers.
- Fake wallet apps look like well-known wallets. When you type in your seed phrase, it goes straight to the scammers.
- Keyloggers record everything you type on the keyboard.
- Remote access tools give someone else control of your computer. Scammers often ask people to install them, AnyDesk for example.
How does it get in?
Malware often hides in email attachments, fake downloads, pirated software and games, browser extensions and ads that lead to fake sites. PhishingPhishingA scam where criminals pretend to be a trusted company or authority to get you to hand over passwords, card details or your seed phrase. is the most common route: a message that gets you to click a link or download a file.
How do you protect yourself?
- Only download apps from official app stores or the maker's own website, and check the publisher's name.
- Keep your operating system, browser and apps up to date.
- Always compare a wallet address character by character after you paste it.
- Never type a seed phrase into a website. With a hardware walletHardware walletA small device that keeps private keys offline and signs transactions inside the device, so the keys never reach your computer or phone., the keys never touch the computer.
- Don't give anyone remote access to your device.
If you think a device is infected, stop using it for anything financial and get help. CERT-IS, Iceland's national cybersecurity team, takes reports of cyberattacks.
Everything in Myntkaup Learn is written and regularly reviewed by the Myntkaup editorial team. It is for education and is not investment advice. Editorial policy. Updated 2 November 2026.