Security firm Mosyle has identified a new malware, ModStealer, capable of bypassing mainstream antivirus software to steal encrypted browser wallet data. The malware affects Windows, Linux, and macOS systems by masquerading as a background helper program. Distributed through fake job ads targeting developers with Node.js, ModStealer collects wallet extensions, system credentials, and digital certificates, uploading them to a remote server. Experts warn that ModStealer poses a significant threat to cryptocurrency users and platforms, risking the exposure of private keys, mnemonics, and API keys. This could potentially lead to large-scale on-chain attacks, highlighting the need for enhanced security measures in the crypto space.