How does the “GhostBlade” malware work?

[chainsniff]

Q: What is GhostBlade?
A: GhostBlade is a crypto-focused malware identified by Google Threat Intelligence Group. It is designed to collect and send sensitive data—like wallet files and credentials—to attacker-controlled servers.

Q: What makes it different from other malware?
A: Unlike long-term spyware, GhostBlade acts quickly. It steals data and then deletes traces of itself, making it harder for users to detect that their device has been compromised.

[cryptobro]

malware that steals your data and cleans up after itself, truly a polite thief

[UndeadBeastMonkeykiller]

I’ve seen similar setups before… could go either way