Police warning of hidden malware risk

[Gaybutton]

Police warn of hidden malware risk

by Wassayos Ngamkham

May 19, 2026

Police on Monday issued a warning about dangerous malware known as "JSceal" that allows hackers to remotely control victims' screens and transfer money.

Pol Maj Gen Chananat Sarathawanphaet, commander of the Technology Crime Suppression Division (TCSD), said the warning followed an alert issued by the Anti-Cyber Scam Centre (ACSC) after authorities found nearly 10 victims had already lost more than 10 million baht.

Investigators found the malware hidden on victims' computers, particularly those running Windows.

The malware operates quietly in the background and is difficult to detect, allowing hackers to gain access to passwords, browsing history and cryptocurrency wallets.

The malware gives hackers near-complete control of the computer, as if they were sitting directly in front of the victim's screen, allowing them to operate the device and quietly transfer money, he said.

He said most victims were found to be using pirated software, including illegal Windows programs, which increased the risk of malware infection.

Apart from pirated software downloads, such malware is commonly spread through untrusted websites, suspicious online advertisements and copied programs transferred from infected devices.

Investigators also found that hackers mainly targeted cryptocurrency assets because they were harder for police to trace than cash transactions.

Authorities speculated that the attackers are part of an international cybercrime network. Their identities and nationalities remain unclear, although police are continuing to investigate the group's origins.

Users are advised to avoid downloads from unreliable sources, always run antivirus software, regularly update operating systems and applications to the latest versions and regularly check app permissions.

Investigators found that hackers were able to access one-time passwords (OTPs) sent via Google Messages on mobile phones synced with infected computers. This allowed criminals to complete financial transactions using victims' accounts.

https://www.bangkokpost.com/thailand/ge ... lware-risk

[Jun]

Investigators found that hackers were able to access one-time passwords (OTPs) sent via Google Messages on mobile phones synced with infected computers. This allowed criminals to complete financial transactions using victims' accounts.

I'm not a fan of OTP sent via text message.
1 I put a different SIM in my phone when visiting Thailand, so have to get the spare phone out when using a UK financial service provider that uses it. I even sacked one credit card provider for using these. I'd like to sack one of my stockbrokers for the same reason, but there aren't enough good ones to do that.

2 A thief who gets hold of your SIM can stick it in any old phone and receive the text messages. Whereas phone app authentication of purchases usually uses the fingerprint sensor.

3 Now the Thai police say hackers can intercept the OTPs ? Good. I hope word gets around and this security option is abandoned.

[Gaybutton]

I'm not a fan of OTP sent via text message.

Neither am I. But it seems like whatever security measures they come up with, sooner or later hackers manage to find ways to beat them.

So far, at least for me, use of very strong, complex passwords has been working, along with regularly changing them. But I can't help but think the day will come when the hackers manage to beat those too.