How you can avoid attacks on your crypto wallets.

[Crypto Library]

Take note that it is not simply about having a separate wallet, the wallet has to be airgapped, because even if you have a separate wallet that you only use to store BTC and nothing else, but it is online, then it is still very risky. If the wallet is airgapped, then it is safe if you also have good opsec too.

You are right it is always better to use air gapped devices I mean the hardware wallet for holding the big fund.  But if the user can't afford that or can't able to purchase hardware wallet for holding or get more security then I think there is no other way to use and separate wallet.
Like me in my country the crypto and it's all kinds of device are currently bann and for that I can't import any hard ware. So I used to choose an separate wallet for that. Like in the first I created and wallet then I remove from my all kinds of device that and store the private phrase in a secured place.

[SamReomo]

You are right it is always better to use air gapped devices I mean the hardware wallet for holding the big fund.  But if the user can't afford that or can't able to purchase hardware wallet for holding or get more security then I think there is no other way to use and separate wallet.

Well, there's no need of hardware wallet when your intention is to store your Bitcoin and other crypto on an air gapped device. These days the used hardware are quite cheap in value and those can be used as air gapped device and their cost is low as compare to hardware wallets.

[taufik123]

I am more vigilant and careful about what I will open and install on the device I use as a digital wallet.
Because it all starts with the user and if the user is careless enough then the security of any wallet will be useless.

But it is better to use a hardware wallet and it is a recommendation for everyone to store their main assets offline and it is certainly more secure than a digital wallet on your mobile device or computer. Just need to store the seed phrase safely and make sure the storage medium is strong enough for all sorts of damage.

[Z-tight]

These days the used hardware are quite cheap in value and those can be used as air gapped device and their cost is low as compare to hardware wallets.

Hardware wallets are not expensive too, but with an airgapped wallet all you need is an old device and the skill to set it up. I always recommend to newbies that they should use hardware wallets, because they may not have the skill to set up their airgapped wallet in a safe environment.

[vegasus]

1. Clearly no, because the phishing link works very fast and dangerous. And here, I personally am very preventive against all kinds of links in emails or other platforms. Prevention is better than cure, there have been many examples of experiences from others, and that's enough, without having to experience it yourself.

3. I'm using it, because I sometimes cannot access some certain platforms. but ensure that it's paid one, and stay to be careful, every V{N must have also the risks, so, be careful of using it, too.

 

[Alone055]

I am more vigilant and careful about what I will open and install on the device I use as a digital wallet.
Because it all starts with the user and if the user is careless enough then the security of any wallet will be useless.

Exactly, it's all about the user who isn't vigilant about the threats posed at them if they are storing their assets in the device that they use normally. I mean, if I know that I have large funds invested in Bitcoin or other cryptocurrencies, and that I'm planning to hold them for long-term, I shouldn't store them in a device that I'm using for every normal thing such as playing games, using social media, or even downloading apps from the internet.

If someone wants to store their funds in a device using a non-custodial wallet such as Electrum instead of using a hardware wallet, they need to make sure that they are having a separate device for that purpose so that it stays clean from everything and the assets stay safe.

[TomPluz]

StilachiRAT is not yet used to target people en masse but it is good to avoid it. The recent Malware that people need to avoid right now is on Reddit which can be downloaded through a free version of TradingView but which is from hackers and not TradingView.

One thing for sure: hackers and scammers are using their genius, skills, technology, resources and ingenuity to make big money by attacking people 24/7 and they are really successful on what they do. Now, we should really be careful these days especially for people who are involved with cryptocurrency as they know that once they can break through then we are done. I used to be getting emails telling me that someone is about to transfer some Bitcoin to my account and I need to click a link to confirm the transaction...but since am already aware of this scheme I just blocked and delete them. It is so important that we avoid free cracked version of premium software or programs as they can be trojan horse out to destroy us and take away our digital assets.

[DYING_S0UL]

StilachiRAT is not yet used to target people en masse but it is good to avoid it. The recent Malware that people need to avoid right now is on Reddit which can be downloaded through a free version of TradingView but which is from hackers and not TradingView.

We should always refrain from using mod/cracked apps from unknown sources even thought I am using one, lol. That is why I have separated my devices for different works. One is for overall everything where I am using cracked software like the Adobe ones (it's expensive, I can't buy it), where no wallet or anything related crypto finance is being used. And the other one is for crypto only. This way I can slim out my chances of getting compromised and suffering loses. The funny thing is, I got compromised twice with the non financial device (ransomware malware), but since nothing was there I just erased my harddisk. My second device is an old one, and I don't install any apps there apart from my wallet and related stuff...

[bayu7adi]

If all the problems mentioned by OP on the first page are related to PC, why don't we just keep our seed or private key away from PC.. we can write it manually, write it once for life... then store it in a safe place that is difficult for ordinary people to reach.... I think we don't need to be afraid of malware anymore...

If the purpose is only to check the balance, then we can use mempool or other blockchain explorers, and if the concern is when making transactions, then Trezor is the solution...

Trezor + storing private keys offline, is strong enough to make our assets safer than storing seeds/private keys on PC.

[Charles-Tim]

If all the problems mentioned by OP on the first page are related to PC, why don't we just keep our seed or private key away from PC.. we can write it manually, write it once for life... then store it in a safe place that is difficult for ordinary people to reach.... I think we don't need to be afraid of malware anymore...

I also like to extend my seed phrase with passphrase in case of offline attack.

Be afraid of malware and avoid it if that is only what you posted. Read more about how to avoid malware.

Not backup your seed phrase on your device is just one of what you should do but there are many more. Malware can still compromise your wallet even if the seed phrase is not on your device. Make sure you do not download malware. Prevention is better than cure.

and if the concern is when making transactions, then Trezor is the solution...

What do you mean by this?

There are safe wallets called cold wallets. Also hardware wallets are safe but if they are reputed. I prefer wallet on airgapped device and paper wallet generated on airgapped device than any other wallet.

[Hatchy]

   Like in the first I created and wallet then I remove from my all kinds of device that and store the private phrase in a secured place.

Some people might consider sneaking some hardware wallets into the country even if crypto is banned. Though I'm not advising on that. Since you can't use the hardwares wallet, it's better to either create an air gapped wallet and store your funds offline.

[Forsyth Jones]

I haven't used an antivirus on my Windows for 7 or 8 years, I only got a bitcoin stealer hijacking virus once, which resulted in the loss of some funds (an irrelevant amount at the time), after that, I researched web security and never gotten a virus or malware again, nor have I been robbed.

If you understand about security, technically you don't need an antivirus, you should be your antivirus, and I believe that Microsoft Defender, which is free, already does a great job.
What we can do is create a good firewall, does anyone have any tips on how to configure a good firewall?

Important reminder: keeping most of your funds on an air-gapped offline computer or in a hardware wallet like Trezoror Bitbox significantly reduces the chances of malware and any remote attack.

Thanks for this awesome warning thread.

[Aanuoluwatofunmi]

Many users don't know how to differentiate between the types of wallets and to also know about how the security of this wallets is expected to be practiced, this is as a matter of urgency the most important consideration which we can always determine to learn and be aware of right before making an investment, because such is our first security, we should know the security practice and also maintain privacy in using our desired wallet which should be mostly a non custodial wallet.

[taufik123]

If someone wants to store their funds in a device using a non-custodial wallet such as Electrum instead of using a hardware wallet, they need to make sure that they are having a separate device for that purpose so that it stays clean from everything and the assets stay safe.

The use of a hardware wallet will certainly provide security in all aspects as long as the hardware wallet is not hacked or uses the private key that you store, whoever owns the Private Key is the owner.
That's why before using a hardware wallet, store the 12-24 word Seed Phrase in the safest place and make sure it's resistant to all kinds of damage.

Any attack if using a hardware wallet is safe enough, hacking methods on other wallets will not work on hardware wallets.
I've been using a hardware wallet since 5 years ago, so I know how secure it is until now.

[ZAINmalik75]

By now you should be aware of StilachiRAT malware that is targeting crypto wallets. I noticed there’s no discussion about it on the forum. So here are few tips to help avoid it.

1. You should avoid clicking on random links come across or downloading attachments from unknown or unexpected sources; it might be on your social media account or through emails.

2.  You should install and update the antivirus, you have on your PC.

3. I also heard VPN works but i haven’t tried it myself

4. You should turn off unnecessary remote access and also use a firewall to block fake connections.

5. Always check for emails that gives a sense of urgency to take a quick action.

6. Check if there isn’t an unsual activity in your PC

7. Also remember to scan for malware regularly on your computer

 This are some few tips that can help you to avoid this malware attack. If you also have any more to add, you can drop them.

Never heard the word before but aware of the way of how hacking works, it all starts by clicking on a link or downloading some pdfs or attachments. Now a days people are using very old fashioned techniques to scam others, they create fake girl ids on social media and send you a pm and says, this link is my friend's profile, she is very introverted and did not want to directly connect with you so she asked me, can you give her a hi. This is how they start their message.

We all must have received such exciting messages, but we should never take them seriously. Normally the unusal behaviour of PC is when some windows opens and closes quickly when you power on your pc so keep an eye on that, and take proper actions.