Miasma: Cryptocurrency Wallet File Access Across Multiple Wallet Types

Duo Tech@duotech

•updated Jul 15, 2026•0•0•1

This rule detects processes attempting to access known cryptocurrency wallet data files. These files, such as 'wallet.dat' or 'wallet.json', are high-value targets for attackers seeking to exfiltrate cryptographic assets. The rule excludes common, legitimate cryptocurrency wallet applications that are expected to access these specific files.