Quote from: ABISprotocol on February 10, 2014, 12:15:15 AM

Thanks to the bitcointalk and reddit communit(ies) for making this known. I'll make sure and make a post about it to the Unsystem list, where the developer of sx (which is not malware, but was used by the Stealthbit author(s) apparently) will I'm sure address it and provide some advice. Fortunately, I didn't touch the Bitvanity or Stealthbit stuff - and it's obvious that the person(s) who designed Bitvanity/Stealthbit are thieves, now I guess the question is, what does the community of developers do about it. Time to pop that question.

Yes, this cannot be stressed enough. Devs of sx (used for Stealthbit app) and Vanitygen (used for Bitvanity app) had nothing to do with mentioned malwares. Trevor just recompiled their code while introducing some malicious binary.

Look like the Reedit community is way more active than this forum. After 6 months, 2 threads and various posts, not much has happened on bitcointalk. On reedit, in 48 hours 2 guys have been working on deciphering the code.

Quote from: nptacek @ Reddit

ref. http://www.reddit.com/r/Bitcoin/comments/1xf2qj/my_wallet_just_emptied_into_this_address/cfbhip5

Finally made an account on Reddit just to reply to this. After seeing this post early this morning I spent the day analyzing the malware and the preliminary analysis is available here[1] . Basically, the pre-compiled StealthBit app acted as a dropper for a disguised payload which installed the background process to check in with the server for updates, send information, etc, and a browser extension for Safari and/or Google Chrome (depending on what you've got installed) that slurps up all your browsing data (which is where they got your wallet info from). I'm hoping to have more time to analyze it further tomorrow, but I've been at it for almost 10 hours straight and I'm exhausted!

Quote from: daibasen on February 10, 2014, 09:14:06 AM

So SecureMac is reporting "multiple" wallet thefts on its blog:
http://www.securemac.com/CoinThief-BitCoin-Trojan-Horse-MacOSX.php

Has anyone else here come across other known victims of this?

Thanks for the link. I m not aware of multiple thefts, although victims might just not be aware these apps were to be blamed.