{"id":185545,"date":"2026-03-27T09:08:15","date_gmt":"2026-03-27T09:08:15","guid":{"rendered":"https:\/\/cryptonews.com\/es\/noticias\/torg-grabber-malware-targets-728-crypto-wallets-security-alert\/"},"modified":"2026-03-27T09:05:36","modified_gmt":"2026-03-27T09:05:36","slug":"alerta-malware-que-vacia-728-crypto-wallets","status":"publish","type":"post","link":"https:\/\/cryptonews.com\/es\/noticias\/alerta-malware-que-vacia-728-crypto-wallets\/","title":{"rendered":"Alerta: el malware que vac\u00eda 728 crypto wallets"},"content":{"rendered":"<div class=\"widget widget_block in-content-block\">\n        <div class=\"single-post-new__accordion post-block-selector-widget\" style=\"display: block;\">\n            <div class=\"single-post-new__accordion-one\">\n                <div class=\"single-post-new__accordion-head js_single-post-new__accordion-head post-block-selector\">\n                    <span class=\"icon\">\n                        <svg width=\"32\" height=\"32\" viewbox=\"0 0 32 32\" fill=\"none\" xmlns=\"https:\/\/www.w3.org\/2000\/svg\">\n                            <g clip-path=\"url(#clip0_12065_47213)\">\n                                <path d=\"M24.0055 16.0012L16.0039 24L24.0055 31.9988L32.0071 24L24.0055 16.0012Z\" fill=\"#351774\"><\/path>\n                                <path d=\"M24.0096 0H8.00391L16.0067 8L24.0096 16L32.0124 8L24.0096 0Z\" fill=\"#DC5992\"><\/path>\n                                <path d=\"M16.0056 24L8.00282 16L0 24L8.00282 32H24.0085L16.0056 24Z\" fill=\"#591C7E\"><\/path>\n                                <path d=\"M8.00282 0L0 8V24L8.00282 16L16.0056 8L8.00282 0Z\" fill=\"#A72E83\"><\/path>\n                            <\/g>\n                            <defs>\n                                <clippath id=\"clip0_12065_47213\">\n                                    <rect width=\"32\" height=\"32\" fill=\"white\"><\/rect>\n                                <\/clippath>\n                            <\/defs>\n                        <\/svg>\n\n                    <\/span>\n                    <span class=\"value mb-0\">Por qu\u00e9 confiar en CryptoNews<\/span>\n                <\/div>\n\n\n                <div class=\"single-post-new__accordion-body\" style=\"display: none\">\n                    <span style=\"font-weight: 400\">Cryptonews ha cubierto los temas de la industria de las criptomonedas desde 2017, con el objetivo de proporcionar informaci\u00f3n \u00fatil a nuestros lectores. Nuestros periodistas y analistas tienen una amplia experiencia en an\u00e1lisis de mercado y tecnolog\u00edas blockchain. Nos esforzamos por mantener altos<\/span><a href=\"https:\/\/cryptonews.com\/es\/pautas-editoriales\/\"><span style=\"font-weight: 400\">est\u00e1ndares editoriales<\/span><\/a><span style=\"font-weight: 400\">, centr\u00e1ndonos en la precisi\u00f3n de los hechos y la presentaci\u00f3n de informes equilibrados en todas las \u00e1reas, desde criptomonedas y proyectos blockchain hasta eventos de la industria, productos y desarrollos tecnol\u00f3gicos. Nuestra presencia continua en la industria refleja nuestro compromiso de brindar informaci\u00f3n relevante en el cambiante mundo de los activos digitales.<\/span><a href=\"https:\/\/cryptonews.com\/es\/sobre-nosotros\/\"><span style=\"font-weight: 400\">Lea m\u00e1s sobre Cryptonews<\/span><\/a><span style=\"font-weight: 400\">.<\/span><span style=\"font-weight: 400\">Divulgaci\u00f3n de anuncios: Creemos en la transparencia total con nuestros lectores. Algunos de nuestros contenidos incluyen enlaces de afiliados y podemos ganar una comisi\u00f3n a trav\u00e9s de estas asociaciones.<\/span>                <\/div>\n            <\/div>\n        <\/div>\n    <\/div><p>Los investigadores de seguridad han identificado una nueva y agresiva amenaza denominada <strong>Torg Grabber<\/strong>, un malware que ya se encuentra en despliegue.<\/p><p>Este software malicioso est\u00e1 dise\u00f1ado espec\u00edficamente para comprometer 728 extensiones de <strong>crypto wallets<\/strong> dentro de un cat\u00e1logo de m\u00e1s de 850 complementos de navegador, lo que representa un riesgo cr\u00edtico para la custodia personal de activos digitales.<\/p><p>El funcionamiento de Torg Grabber se centra en la filtraci\u00f3n de frases semilla, claves privadas y tokens de sesi\u00f3n a trav\u00e9s de canales cifrados. Lo m\u00e1s preocupante es que este proceso suele completarse antes de que la mayor\u00eda de las herramientas de seguridad de los endpoints logren registrar un evento.<\/p><p>Seg\u00fan los informes de Gen Digital, se han recopilado 334 muestras durante un periodo de desarrollo de tres meses, confirmando que se trata de una <strong>operaci\u00f3n activa de Malware-as-a-Service (MaaS)<\/strong> con operadores identificados.<\/p><p>M\u00e1s all\u00e1 de su arquitectura b\u00e1sica, esta operaci\u00f3n se sustenta en un ecosistema de ciberdelincuencia de habla rusa que utiliza un sistema de panel y constructor para lanzar campa\u00f1as independientes.<\/p><p>Al operar bajo un modelo MaaS, el malware permite a diversos atacantes personalizar binarios maliciosos, lo que significa que la escala del ataque <strong>podr\u00eda multiplicarse r\u00e1pidamente<\/strong> a medida que m\u00e1s actores compren acceso a la herramienta.<\/p><p>Gen Digital destaca que esta estructura profesionalizada hace que la amenaza sea mucho m\u00e1s persistente que un simple virus convencional.<\/p><div>\n    <section class=\"toc-sticky w-100 bg-white \">\n        <div class=\"toc-sticky__container container\">\n            <div class=\"toc-sticky__open d-flex align-items-end\" data-bs-toggle=\"collapse\" aria-controls=\"multiCollapse1\" data-bs-target=\"#multiCollapse1\">\n                <button class=\"btn btn-primary collapse-action-btn p-1 rounded-circle\" type=\"button\">\n                    <i class=\"icon-chevron-up\"><\/i>\n                <\/button>\n                <span class=\"toc-main-title-permanent\">Table of Contents<\/span>\n            <\/div>\n            <div class=\"collapse  show my-3\" id=\"multiCollapse1\">\n                <ol class=\"StepProgress\">\n                    <li class=\"StepProgress-item current\">En este art\u00edculo<\/li>\n                                                                    <div class=\"StepProgress-item__group\">\n                            <a data-id=\"h-como-torg-grabber-compromete-las-crypto-wallets\" class=\"StepProgress-item__link\" data-level=\"2\">\u00bfC\u00f3mo Torg Grabber compromete las crypto wallets?<\/a>\n                                                    <\/div>\n                                                \n                                                                        <li class=\"StepProgress-item subList-in-progress\">\n                                                <div class=\"StepProgress-item__group\">\n                            <a data-id=\"h-quienes-estan-en-riesgo-ante-esta-amenaza\" class=\"StepProgress-item__link\" data-level=\"2\">\u00bfQui\u00e9nes est\u00e1n en riesgo ante esta amenaza?<\/a>\n                                                            <span class=\"StepProgress-item__link-sub\"><\/span>\n                                                    <\/div>\n                                                    <ol class=\"StepProgress-sub-list collapse\" id=\"TOC1sublist-h-quienes-estan-en-riesgo-ante-esta-amenaza\">\n                                                                    <li class=\"StepProgress-sub-item\">\n                                        <span>\n                                          <a data-id=\"h-ultimas-noticias-de-mercado\" class=\"StepProgress-item__link\" data-level=\"3\">\u00daltimas noticias de mercado:<\/a>\n                                        <\/span>\n                                    <\/li>\n                                                            <\/ol>\n                                                <\/li>\n                                    <\/ol>\n                <div class=\"toc-sticky__container__disperse\"><\/div>\n            <\/div>\n        <\/div>\n    <\/section>\n    <div class=\"toc-sticky-list\">\n        <div class=\"toc-sticky__container container\">\n            <div class=\"toc-sticky__open d-flex align-items-end\" data-bs-toggle=\"collapse\" aria-controls=\"multiCollapse2\" data-bs-target=\"#multiCollapse2\">\n                <button class=\"btn btn-primary collapse-action-btn p-1 rounded-circle\" type=\"button\">\n                    <i class=\"icon-chevron-up up\"><\/i>\n                <\/button>\n            <\/div>\n            <div class=\"collapse show my-3\" id=\"multiCollapse2\">\n                <ol class=\"StepProgress\">\n                    <li class=\"StepProgress-item current\">En este art\u00edculo<\/li>\n\n                                                                                                                        <li class=\"StepProgress-item \">\n                                                <div class=\"StepProgress-item__group\">\n                            <a data-id=\"h-como-torg-grabber-compromete-las-crypto-wallets\" class=\"StepProgress-item__link\" data-level=\"2\">\u00bfC\u00f3mo Torg Grabber compromete las crypto wallets?<\/a>\n                                                    <\/div>\n                                                <\/li>\n                                                                                                                    <li class=\"StepProgress-item subList-in-progress \">\n                                                <div class=\"StepProgress-item__group\">\n                            <a data-id=\"h-quienes-estan-en-riesgo-ante-esta-amenaza\" class=\"StepProgress-item__link\" data-level=\"2\">\u00bfQui\u00e9nes est\u00e1n en riesgo ante esta amenaza?<\/a>\n                                                            <span class=\"StepProgress-item__link-sub\"><\/span>\n                                                    <\/div>\n                                                    <ol class=\"StepProgress-sub-list collapse\" id=\"sublist-h-quienes-estan-en-riesgo-ante-esta-amenaza\">\n                                                                    <li class=\"StepProgress-sub-item\">\n                                        <span>\n                                          <a data-id=\"h-ultimas-noticias-de-mercado\" class=\"StepProgress-item__link\" data-level=\"3\">\u00daltimas noticias de mercado:<\/a>\n                                        <\/span>\n                                    <\/li>\n                                                            <\/ol>\n                                                <\/li>\n                                    <\/ol>\n            <\/div>\n            <div class=\"toc-sticky__container__disperse\"><\/div>\n        <\/div>\n    <\/div>\n<\/div><script id=\"toc-js\">\n    window.addEventListener(\"DOMContentLoaded\", () => {\n        const header = document.querySelector(\".header_wrapper\");\n\n        const pageLegend = document.querySelector('#multiCollapse1');\n        const pageLegendList = document.querySelector('#multiCollapse2');\n        const pageLegendCollapse = new bootstrap.Collapse(pageLegend, {toggle: document.querySelector(\".toc-sticky\").classList.contains('sticky')});\n\n        \/**\n         * Changing current title\n         *\/\n        (function (pageLegend) {\n            const titleNodes = pageLegend.querySelectorAll('.StepProgress-item__link');\n\n            if (!titleNodes.length) return;\n\n            const titles = [...titleNodes].map((itm, i) => ({\n                id: itm.getAttribute('data-id'),\n                text: itm.textContent,\n                level: itm.getAttribute('data-level'),\n                linkNode: itm,\n                titleNode: document.getElementById(itm.getAttribute('data-id')),\n                index: i,\n            }));\n\n            \/**\n             * Source: https:\/\/www.sitepoint.com\/throttle-scroll-events\/\n             * @param {Function} fn\n             * @param {number} wait\n             * @returns {(function(): void)|*}\n             *\/\n            const throttle = (fn, wait) => {\n                let time = Date.now();\n                return function () {\n                    if ((time + wait - Date.now()) < 0) {\n                        fn();\n                        time = Date.now();\n                    }\n                }\n            }\n\n            const changeCurrentTitle = () => {\n                const documentScrollTop = window.pageYOffset || document.documentElement.scrollTop || document.body.scrollTop || 0;\n                let current = 0;\n\n                \/\/ Title\n                titles.forEach((itm, i) => {\n                    \/\/console.log(itm)\n                    const itmOffsetTop = itm.titleNode ? itm.titleNode.offsetTop - 100 : 0;\n\n                    if (documentScrollTop >= itmOffsetTop) {\n                        document.getElementById('toc-current-title').innerHTML = itm.text;\n                        document.getElementById('toc-current-title').setAttribute('data-current-id', itm.id);\n                        document.getElementById('toc-current-title').setAttribute('data-current-level', itm.level);\n                        current = i;\n                    }\n                })\n\n                \/\/ close all list and open sub list if needed\n                if (document.querySelector(\".toc-sticky\").classList.contains('sticky')) {\n                    document.querySelectorAll('.subList-in-progress').forEach((el) => {\n                        el.children[1].classList.remove('show');\n                        el.getElementsByClassName('icon-chevron-down')[0].classList.remove('up');\n                    });\n                    const currentEl = titles[current];\n                    currentEl.linkNode.classList.add('show');\n                }\n\n                titles.forEach((itm, i) => {\n                    itm.linkNode.parentNode.parentNode.classList.remove('current', 'is-done');\n                    if (current > i) {\n                        itm.linkNode.parentNode.parentNode.classList.add('is-done')\n                    };\n                    if (current === i) {\n                        itm.linkNode.parentNode.parentNode.classList.add('current');\n                    };\n                })\n\n            }\n\n            changeCurrentTitle();\n\n            document.addEventListener('scroll', throttle(changeCurrentTitle, 50));\n        })(pageLegend);\n\n        \/**\n         *  Collapse\n         *\/\n        (function (pageLegend, header) {\n            const icon = pageLegend.parentNode.querySelector(\".collapse-action-btn i\");\n\n            const collapseToggle = (status) => (e) => {\n                if (!e.target.isEqualNode(pageLegend)) return;\n\n                icon.classList.toggle(\"up\");\n\n                const containerHeight = pageLegend.getBoundingClientRect().height;\n\n                const showSubtitleContent = () => {\n                    const currentId = document.getElementById('toc-current-title').getAttribute('data-current-id');\n                    const currentLevel = document.getElementById('toc-current-title').getAttribute('data-current-level');\n                    const currentSubTitle = currentLevel == 3 ? document.querySelector(`a[data-id=\"${currentId}\"]`).parentNode.parentNode.parentNode : false;\n\n                    if (!currentSubTitle) return;\n                    new bootstrap.Collapse(currentSubTitle, {toggle: false}).show();\n                }\n\n                showSubtitleContent();\n                console.log(status + 'fdsfsd' + containerHeight);\n                if (status === 'shown' && document.querySelector(\".toc-sticky\").classList.contains('sticky')) {\n                    document.querySelector('html').classList.remove('overflow-hidden');\n                    pageLegend.classList.add('overflow-auto');\n                    pageLegend.style.height = `calc(100vh - ${header.getBoundingClientRect().height + document.querySelector('.toc-sticky__open').getBoundingClientRect().height + 16}px)`;\n                } else if (status === 'hide') {\n                    document.querySelector('html').removeClass('overflow-hidden');\n                    pageLegend.classList.remove('overflow-auto');\n                    pageLegend.style.height = 'auto';\n                }\n            }\n\n            pageLegend.addEventListener('shown.bs.collapse', collapseToggle('shown'));\n            pageLegend.addEventListener('hide.bs.collapse', collapseToggle('hide'));\n        })(pageLegend, header);\n\n        \/**\n         * Collapse sub-titles\n         *\/\n        (function (pageLegend) {\n            const collapseEls = pageLegend.querySelectorAll('.collapse');\n\n            collapseEls.forEach(function (el) {\n\n                const toggleArrowDirection = function (e) {\n                    if (!e.target.isEqualNode(el)) return;\n\n                    const id = this.getAttribute('id');\n                    document.querySelector(`.collapse-action-btn[data-bs-target=\"#${id}\"] .icon-chevron-down`).classList.toggle('up');\n                }\n                el.addEventListener('shown.bs.collapse', toggleArrowDirection);\n                el.addEventListener('hide.bs.collapse', toggleArrowDirection);\n            })\n        })(pageLegend);\n\n        \/**\n         *  Collapse main title\n         *\/\n        (function (pageLegendList) {\n            const icon = pageLegendList.parentNode.querySelector(\".collapse-action-btn i\");\n\n            const collapseToggle = () => (e) => {\n                if (!e.target.isEqualNode(pageLegendList)) return;\n\n                icon.classList.toggle(\"up\");\n\n            }\n            pageLegendList.addEventListener('shown.bs.collapse', collapseToggle());\n            pageLegendList.addEventListener('hide.bs.collapse', collapseToggle());\n        })(pageLegendList);\n\n        (function (pageLegendList) {\n            const collapseEls = pageLegendList.querySelectorAll('.collapse');\n\n            collapseEls.forEach(function (el) {\n\n                const toggleArrowDirection = function (e) {\n                    if (!e.target.isEqualNode(el)) return;\n\n                    const id = this.getAttribute('id');\n                    document.querySelector(`.toc-sticky-list .collapse-action-btn[data-bs-target=\"#${id}\"] .icon-chevron-down`).classList.toggle('up');\n                }\n                el.addEventListener('shown.bs.collapse', toggleArrowDirection);\n                el.addEventListener('hide.bs.collapse', toggleArrowDirection);\n            })\n        })(pageLegendList);\n\n        \/**\n         * Sticky functionality\n         * Source: https:\/\/stackoverflow.com\/questions\/17893771\/javascript-sticky-div-after-scroll\n         *\/\n        (function (header, pageLegendCollapse) {\n            \/\/ set everything outside the onscroll event (less work per scroll)\n            const target = document.querySelector(\".toc-sticky\");\n            const targetListStatic = document.querySelector(\".toc-sticky-list\");\n\n            if (!target || !header) return;\n\n            const headerHeight = header.getBoundingClientRect().height;\n            const targetHeight = targetListStatic.getBoundingClientRect().height;\n\n            \/\/ -headerHeight so it won't be jumpy\n            const stop = targetListStatic.offsetTop + headerHeight + targetHeight;\n            const docBody =\n                document.documentElement || document.body.parentNode || document.body;\n            const hasOffset = window.pageYOffset !== undefined;\n\n            const applySticky = function () {\n                \/\/ cross-browser compatible scrollTop.\n                const scrollTop = hasOffset ? window.pageYOffset : docBody.scrollTop;\n\n                \/\/ if user scrolls to headerHeight from the top of the target div\n                if (scrollTop >= stop) {\n                    pageLegendCollapse.hide();\n                    \/\/ stick the div\n                    target.classList.add(\"sticky\");\n                    \/\/target.style.marginTop = `${headerHeight}px`;\n                } else {\n                    pageLegendCollapse.show();\n                    \/\/ release the div\n                    target.classList.remove(\"sticky\");\n                    target.style.marginTop = \"\";\n                }\n            }\n\n            applySticky();\n\n            window.addEventListener('scroll', applySticky);\n        })(header, pageLegendCollapse);\n\n        jQuery('span.show_moretoc').click(function () {\n            jQuery('span.show_moretoc').hide();\n            jQuery('.ms_hidetoc').show();\n        });\n    });\n<\/script><h2>\u00bfC\u00f3mo Torg Grabber compromete las crypto wallets?<\/h2><span class=\"replacer\"><\/span><p>La cadena de infecci\u00f3n comienza con un archivo ejecutable disfrazado de una actualizaci\u00f3n leg\u00edtima de Chrome, llamado <code>GAPI_Update.exe<\/code>. Este paquete de 60 MB establece una presencia aparentemente limpia en el sistema antes de lanzar una barra de progreso falsa de <strong>&#8220;Actualizaci\u00f3n de seguridad de Windows&#8221;<\/strong> que dura exactamente <strong>420 segundos<\/strong>.<\/p><p>Este retraso es una t\u00e1ctica deliberada para crear una ventana de tiempo cre\u00edble mientras el payload real se despliega en segundo plano.<\/p><p>Una vez instalado, Torg Grabber no solo busca <strong>crypto wallets<\/strong>; su alcance se extiende a 25 navegadores basados en Chromium, 8 variantes de Firefox, adem\u00e1s de aplicaciones como Discord, Telegram, clientes VPN y administradores de contrase\u00f1as.<\/p><p>La exfiltraci\u00f3n de datos utiliza cifrado ChaCha20 con autenticaci\u00f3n HMAC-SHA256 a trav\u00e9s de la infraestructura de Cloudflare, una arquitectura de nivel profesional que dificulta enormemente la intercepci\u00f3n del tr\u00e1fico robado.<\/p><p><\/p><blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">\ud83d\udea8 CRYPTO THEFT MALWARE: New \u201cTorg Grabber\u201d infostealer targets 728 cryptocurrency wallets.<br><br>The malware is designed to harvest wallet data and enable theft of digital assets.<br><br>Crypto wallets remain a primary target for financially motivated attackers.<\/p>&mdash; CyberAlertsHQ (@CyberAlertsHQ) <a href=\"https:\/\/twitter.com\/CyberAlertsHQ\/status\/2036949002575614362?ref_src=twsrc%5Etfw\">March 25, 2026<\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><p>Para maximizar su eficacia, el malware incorpora t\u00e9cnicas avanzadas conocidas como &#8220;ClickFix&#8221;, que incluyen el secuestro del portapapeles para ejecutar comandos de PowerShell y el uso de un componente de c\u00f3digo especializado de 20KB dise\u00f1ado para evadir la seguridad nativa de los navegadores.<\/p><p>Esta capacidad de ejecuci\u00f3n en memoria permite que el infostealer acceda a <strong>archivos de almacenamiento local<\/strong> sensibles sin dejar rastros obvios en el disco duro. Esto implica que incluso los usuarios que siguen pr\u00e1cticas b\u00e1sicas de seguridad podr\u00edan ver sus fondos comprometidos si conf\u00edan \u00fanicamente en las protecciones est\u00e1ndar de su navegador.<\/p><h2>\u00bfQui\u00e9nes est\u00e1n en riesgo ante esta amenaza?<\/h2><span class=\"replacer\"><\/span><p>El n\u00famero de 728 billeteras no es una cifra al azar; representa un barrido exhaustivo de casi todas las carteras basadas en navegador con un volumen de instalaci\u00f3n significativo.<\/p><p>Usuarios de las <a href=\"https:\/\/cryptonews.com\/es\/guias\/mejor-wallet-criptomonedas\/\" target=\"_blank\" rel=\"noopener\">mejores wallets de criptomonedas<\/a> como <strong>MetaMask<\/strong>, que cuenta con m\u00e1s de 30 millones de usuarios activos mensuales, y <strong>Phantom<\/strong> son los objetivos principales. El riesgo es total para quienes almacenan sus frases semilla en el almacenamiento del navegador, archivos de texto o gestores de contrase\u00f1as locales.<\/p><figure><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/cimg.co\/wp-content\/uploads\/sites\/12\/2026\/03\/27084510\/content-inline-1-50.jpg\" alt=\"\" width=\"700\" height=\"650\"><\/figure><p>Aunque los activos en los <a href=\"https:\/\/cryptonews.com\/es\/criptomonedas\/mejor-exchange-criptomonedas\/\" target=\"_blank\" rel=\"noopener\">mejores exchanges de criptomonedas<\/a> no est\u00e1n expuestos directamente a este vector de ataque, el robo de tokens de sesi\u00f3n puede permitir a los atacantes acceder a cuentas de intercambio si las sesiones de inicio est\u00e1n activas en el navegador infectado.<\/p><p>Los <strong>usuarios de <a href=\"https:\/\/cryptonews.com\/es\/criptomonedas\/cold-wallet\/\" target=\"_blank\" rel=\"noopener\">cold wallets<\/a><\/strong> enfrentan un riesgo menor, limitado \u00fanicamente a situaciones donde sus frases semilla hayan sido digitalizadas y guardadas en el equipo comprometido.<\/p><p>La infraestructura de Torg Grabber, que incluye una API REST descrita por los investigadores como un &#8220;reloj suizo sumergido en veneno&#8221;, sugiere que la lista de carteras objetivo seguir\u00e1 creciendo.<\/p><p>Esta evoluci\u00f3n refleja la tendencia de infostealers previos como Vidar o RedLine, pero con una ejecuci\u00f3n t\u00e9cnica mucho m\u00e1s refinada y estructurada.<\/p><h3>\u00daltimas noticias de mercado:<\/h3><ol>\n<li><a href=\"https:\/\/cryptonews.com\/es\/noticias\/coinbase-rechaza-ley-de-claridad-beneficiar-bancos\/\" target=\"_blank\" rel=\"noopener\">Coinbase rechaza la Ley de Claridad por beneficiar a los Bancos<\/a><\/li>\n<li><a href=\"https:\/\/cryptonews.com\/es\/noticias\/ethereum-anuncia-estrategia-computacion-cuantica\/\" target=\"_blank\" rel=\"noopener\">Ethereum anuncia su estrategia contra la computaci\u00f3n cu\u00e1ntica<\/a><\/li>\n<li><a href=\"https:\/\/cryptonews.com\/es\/noticias\/solana-precio-analisis-derivados\/\" target=\"_blank\" rel=\"noopener\">\u00bfVeremos una ruptura real en el precio de SOL o es una trampa de liquidez?<\/a><\/li>\n<\/ol><p><\/p>","protected":false},"excerpt":{"rendered":"<p>Descubre c\u00f3mo opera Torg Grabber, el nuevo malware que apunta a 728 extensiones de crypto wallets y compromete tus claves privadas.<\/p>\n","protected":false},"author":759,"featured_media":185543,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[43],"tags":[57,90],"redactores":[512],"sponsored_companies":[],"class_list":["post-185545","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology-news","tag-blockchain","tag-criptomonedas","redactores-marina-flores"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Alerta: el malware que vac\u00eda 728 crypto wallets<\/title>\n<meta name=\"description\" content=\"Descubre c\u00f3mo opera Torg Grabber, el nuevo malware que apunta a 728 extensiones de crypto wallets y compromete tus claves privadas.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptonews.com\/es\/noticias\/alerta-malware-que-vacia-728-crypto-wallets\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Alerta: el malware que vac\u00eda 728 crypto wallets\" \/>\n<meta property=\"og:description\" content=\"Descubre c\u00f3mo opera Torg Grabber, el nuevo malware que apunta a 728 extensiones de crypto wallets y compromete tus claves privadas.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptonews.com\/es\/noticias\/alerta-malware-que-vacia-728-crypto-wallets\/\" \/>\n<meta property=\"og:site_name\" content=\"Cryptonews en Espa\u00f1ol\" \/>\n<meta property=\"article:published_time\" content=\"2026-03-27T09:08:15+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cimg.co\/wp-content\/uploads\/sites\/12\/2026\/03\/27084459\/torg-grabber-malware-targets-728-crypto-wallets-security-ale-featured.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"675\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Alerta: el malware que vac\u00eda 728 crypto wallets\" \/>\n<meta name=\"twitter:description\" content=\"Descubre c\u00f3mo opera Torg Grabber, el nuevo malware que apunta a 728 extensiones de crypto wallets y compromete tus claves privadas.\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/cimg.co\/wp-content\/uploads\/sites\/12\/2026\/03\/27084459\/torg-grabber-malware-targets-728-crypto-wallets-security-ale-featured.jpg\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Alerta: el malware que vac\u00eda 728 crypto wallets","description":"Descubre c\u00f3mo opera Torg Grabber, el nuevo malware que apunta a 728 extensiones de crypto wallets y compromete tus claves privadas.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptonews.com\/es\/noticias\/alerta-malware-que-vacia-728-crypto-wallets\/","og_locale":"es_ES","og_type":"article","og_title":"Alerta: el malware que vac\u00eda 728 crypto wallets","og_description":"Descubre c\u00f3mo opera Torg Grabber, el nuevo malware que apunta a 728 extensiones de crypto wallets y compromete tus claves privadas.","og_url":"https:\/\/cryptonews.com\/es\/noticias\/alerta-malware-que-vacia-728-crypto-wallets\/","og_site_name":"Cryptonews en Espa\u00f1ol","article_published_time":"2026-03-27T09:08:15+00:00","og_image":[{"width":1200,"height":675,"url":"https:\/\/cimg.co\/wp-content\/uploads\/sites\/12\/2026\/03\/27084459\/torg-grabber-malware-targets-728-crypto-wallets-security-ale-featured.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_title":"Alerta: el malware que vac\u00eda 728 crypto wallets","twitter_description":"Descubre c\u00f3mo opera Torg Grabber, el nuevo malware que apunta a 728 extensiones de crypto wallets y compromete tus claves privadas.","twitter_image":"https:\/\/cimg.co\/wp-content\/uploads\/sites\/12\/2026\/03\/27084459\/torg-grabber-malware-targets-728-crypto-wallets-security-ale-featured.jpg","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/cryptonews.com\/es\/noticias\/alerta-malware-que-vacia-728-crypto-wallets\/#article","isPartOf":{"@id":"https:\/\/cryptonews.com\/es\/noticias\/alerta-malware-que-vacia-728-crypto-wallets\/"},"author":{"name":"domn","@id":"https:\/\/cryptonews.com\/es\/#\/schema\/person\/7505e51895f10feb029abe55e2dadfa2"},"headline":"Alerta: el malware que vac\u00eda 728 crypto wallets","datePublished":"2026-03-27T09:08:15+00:00","mainEntityOfPage":{"@id":"https:\/\/cryptonews.com\/es\/noticias\/alerta-malware-que-vacia-728-crypto-wallets\/"},"wordCount":779,"commentCount":0,"publisher":{"@id":"https:\/\/cryptonews.com\/es\/#organization"},"image":{"@id":"https:\/\/cryptonews.com\/es\/noticias\/alerta-malware-que-vacia-728-crypto-wallets\/#primaryimage"},"thumbnailUrl":"https:\/\/cimg.co\/wp-content\/uploads\/sites\/12\/2026\/03\/27084459\/torg-grabber-malware-targets-728-crypto-wallets-security-ale-featured.jpg","keywords":["Blockchain","Criptomonedas"],"articleSection":["Noticias de Tecnolog\u00eda"],"inLanguage":"es-ES","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/cryptonews.com\/es\/noticias\/alerta-malware-que-vacia-728-crypto-wallets\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/cryptonews.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/cryptonews.com\/es\/noticias\/alerta-malware-que-vacia-728-crypto-wallets\/","url":"https:\/\/cryptonews.com\/es\/noticias\/alerta-malware-que-vacia-728-crypto-wallets\/","name":"Alerta: el malware que vac\u00eda 728 crypto wallets","isPartOf":{"@id":"https:\/\/cryptonews.com\/es\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptonews.com\/es\/noticias\/alerta-malware-que-vacia-728-crypto-wallets\/#primaryimage"},"image":{"@id":"https:\/\/cryptonews.com\/es\/noticias\/alerta-malware-que-vacia-728-crypto-wallets\/#primaryimage"},"thumbnailUrl":"https:\/\/cimg.co\/wp-content\/uploads\/sites\/12\/2026\/03\/27084459\/torg-grabber-malware-targets-728-crypto-wallets-security-ale-featured.jpg","datePublished":"2026-03-27T09:08:15+00:00","description":"Descubre c\u00f3mo opera Torg Grabber, el nuevo malware que apunta a 728 extensiones de crypto wallets y compromete tus claves privadas.","breadcrumb":{"@id":"https:\/\/cryptonews.com\/es\/noticias\/alerta-malware-que-vacia-728-crypto-wallets\/#breadcrumb"},"inLanguage":"es-ES","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptonews.com\/es\/noticias\/alerta-malware-que-vacia-728-crypto-wallets\/"]}],"author":[]},{"@type":"ImageObject","inLanguage":"es-ES","@id":"https:\/\/cryptonews.com\/es\/noticias\/alerta-malware-que-vacia-728-crypto-wallets\/#primaryimage","url":"https:\/\/cimg.co\/wp-content\/uploads\/sites\/12\/2026\/03\/27084459\/torg-grabber-malware-targets-728-crypto-wallets-security-ale-featured.jpg","contentUrl":"https:\/\/cimg.co\/wp-content\/uploads\/sites\/12\/2026\/03\/27084459\/torg-grabber-malware-targets-728-crypto-wallets-security-ale-featured.jpg","width":1200,"height":675,"caption":"Alerta: el malware que vac\u00eda 728 crypto wallets"},{"@type":"BreadcrumbList","@id":"https:\/\/cryptonews.com\/es\/noticias\/alerta-malware-que-vacia-728-crypto-wallets\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptonews.com\/es\/"},{"@type":"ListItem","position":2,"name":"Alerta: el malware que vac\u00eda 728 crypto wallets"}]},{"@type":"WebSite","@id":"https:\/\/cryptonews.com\/es\/#website","url":"https:\/\/cryptonews.com\/es\/","name":"Cryptonews en Espa\u00f1ol","description":"","publisher":{"@id":"https:\/\/cryptonews.com\/es\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptonews.com\/es\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es-ES"},{"@type":"Organization","@id":"https:\/\/cryptonews.com\/es\/#organization","name":"Cryptonews en Espa\u00f1ol","url":"https:\/\/cryptonews.com\/es\/","logo":{"@type":"ImageObject","inLanguage":"es-ES","@id":"https:\/\/cryptonews.com\/es\/#\/schema\/logo\/image\/","url":"https:\/\/cryptonews.com\/wp-content\/uploads\/sites\/12\/2023\/09\/cropped-CryptoNews-Logo-1.png","contentUrl":"https:\/\/cryptonews.com\/wp-content\/uploads\/sites\/12\/2023\/09\/cropped-CryptoNews-Logo-1.png","width":100,"height":91,"caption":"Cryptonews en Espa\u00f1ol"},"image":{"@id":"https:\/\/cryptonews.com\/es\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/cryptonews.com\/es\/wp-json\/wp\/v2\/posts\/185545","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptonews.com\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptonews.com\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptonews.com\/es\/wp-json\/wp\/v2\/users\/759"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptonews.com\/es\/wp-json\/wp\/v2\/comments?post=185545"}],"version-history":[{"count":4,"href":"https:\/\/cryptonews.com\/es\/wp-json\/wp\/v2\/posts\/185545\/revisions"}],"predecessor-version":[{"id":185549,"href":"https:\/\/cryptonews.com\/es\/wp-json\/wp\/v2\/posts\/185545\/revisions\/185549"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptonews.com\/es\/wp-json\/wp\/v2\/media\/185543"}],"wp:attachment":[{"href":"https:\/\/cryptonews.com\/es\/wp-json\/wp\/v2\/media?parent=185545"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptonews.com\/es\/wp-json\/wp\/v2\/categories?post=185545"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptonews.com\/es\/wp-json\/wp\/v2\/tags?post=185545"},{"taxonomy":"redactores","embeddable":true,"href":"https:\/\/cryptonews.com\/es\/wp-json\/wp\/v2\/redactores?post=185545"},{"taxonomy":"sponsored_companies","embeddable":true,"href":"https:\/\/cryptonews.com\/es\/wp-json\/wp\/v2\/sponsored_companies?post=185545"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}