April

Discord

Security

Read

Hackers are now distributing a Python app posing as a crypto arbitrage bot via a direct message on a public Discord server. 
The infamous <a href="https://crypto.news/tag/north-korea/" data-type="link" data-id="https://crypto.news/tag/north-korea/">North Korean</a> hack group Lazarus Group now targets macOS blockchain engineers on Discord with a novel malware. 
According to cybersecurity firm <a href="https://www.elastic.co/security-labs/elastic-catches-dprk-passing-out-kandykorn" target="_blank" rel="noopener">Elastic Security Labs</a>, the hackers have started distributing a Python-based application pretending to be a crypto arbitrage bot via direct messages on Discord servers. 
The analysts say the so-called Kandykorn malware is being distributed by North Korea given the “techniques, network infrastructure, code-signing certificates, and custom Lazarus Group detection rules.” 
<blockquote class="wp-block-quote"> 
 “The DPRK, via units like the LAZARUS GROUP, continues to target crypto-industry businesses with the goal of stealing cryptocurrency in order to circumvent international sanctions that hinder the growth of their economy and ambitions.” <cite>Elastic Security Labs</cite>
</blockquote> 
 You might also like: <a href="https://crypto.news/lazarus-group-hackers-from-country-with-no-internet-threaten-defi/"> Lazarus Group: hackers from country with no internet threaten defi </a> 
The bad actors are reportedly trying to convince victims to download and decompress a ZIP archive containing malware in the form of an arbitrage bot. Once the malware has been installed on the victim’s device, it possesses a “full-featured set of capabilities to access and exfiltrate data from the victim’s computer,” Elastic Security Labs says. 
The firm claims the hackers have been using this scheme since at least April 2023, adding that the threat is still active and the tools and techniques “are being continuously developed.” 
Lazarus Group shows no signs of stopping and developing new tricks to carry out its fraudulent activities. In early September, the Federal Bureau of Investigation (FBI) said the North Korea-backed hacker group was behind the attack on crypto casino Stake. As crypto.news <a href="https://crypto.news/fbi-lazarus-group-hacked-and-stole-41m-from-crypto-casino-stake/" target="_blank" rel="noreferrer noopener">reported</a>, Stake suffered a hacker attack on Sep. 4, resulting in a loss of more than $40 million in crypto. 
 Read more: <a href="https://crypto.news/lazarus-group-turns-to-garantex-to-launder-stolen-assets/"> Lazarus group turns to Garantex to launder stolen assets </a>

North Korea targets blockchain engineers with new macOS malware

crypto.news

Other articles published on Nov 2, 2023

Are Solana (SOL) And Cardano (ADA) On Track To Upstage Bitcoin?

CPT Token Listed

Bitcoin (BTC) Price Analysis: Bulls Test Major 35982 Target – 3 November 2023

Prediksi Harga DOGE Akhir November, Masih "Digeber?"

BRICS: India Can't Dump US Dollars Anymore To Keep Rupee From Crashing

Charles Hoskinson Outlines Future of Cardano Network

Join our free newsletter for daily crypto updates!