April

Discord

Security

Read

<div class="cryptonews">
 <p class="is-style-lead">Hackers are now distributing a Python app posing as a crypto arbitrage bot via a direct message on a public Discord server.</p>
 <p>The infamous North Korean hack group Lazarus Group now <a rel="noopener noreferrer nofollow" title="targets" href="https://thebittimes.com/tag/targets.html">targets</a> macOS <a rel="noopener noreferrer nofollow" title="blockchain" href="https://thebittimes.com/tag/blockchain.html">blockchain</a> <a rel="noopener noreferrer nofollow" title="engineers" href="https://thebittimes.com/tag/engineers.html">engineers</a> on Discord with a novel <a rel="noopener noreferrer nofollow" title="malware" href="https://thebittimes.com/tag/malware.html">malware</a>.</p>
 <p>According to cybersecurity firm Elastic Security Labs, the hackers have started distributing a Python-based application pretending to be a crypto arbitrage bot via direct messages on Discord servers.</p>
 <p>The analysts say the so-called Kandykorn malware is being distributed by North Korea given the “techniques, network infrastructure, code-signing certificates, and custom Lazarus Group detection rules.”</p>
 <blockquote class="wp-block-quote">
  <p>“The DPRK, via units like the LAZARUS GROUP, continues to <a rel="noopener noreferrer nofollow" title="target" href="https://thebittimes.com/tag/target.html">target</a> crypto-industry businesses with the goal of stealing cryptocurrency in order to circumvent international sanctions that hinder the growth of their economy and ambitions.”</p> <cite>Elastic Security Labs</cite>
 </blockquote>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> Lazarus Group: hackers from country with no internet threaten defi
 </div>
 <p>The bad actors are reportedly trying to convince victims to download and decompress a ZIP archive containing <a rel="noopener noreferrer nofollow" title="malware" href="https://thebittimes.com/tag/malware.html">malware</a> in the form of an arbitrage bot. Once the <a rel="noopener noreferrer nofollow" title="malware" href="https://thebittimes.com/tag/malware.html">malware</a> has been installed on the victim’s device, it possesses a “full-featured set of capabilities to access and exfiltrate data from the victim’s computer,” Elastic Security Labs says.</p>
 <p>The firm claims the hackers have been using this scheme since at least April 2023, adding that the threat is still active and the tools and techniques “are being continuously developed.”</p>
 <p>Lazarus Group shows no signs of stopping and developing new tricks to carry out its fraudulent activities. In early September, the Federal Bureau of Investigation (FBI) said the North Korea-backed hacker group was behind the attack on crypto casino Stake. As crypto.news reported, Stake suffered a hacker attack on Sep. 4, resulting in a loss of more than $40 million in crypto.</p>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> Read more: </span> Lazarus group turns to Garantex to launder stolen assets
 </div> <span class="google-news-banner__label">Follow Us on Google News</span>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/north-korea-targets-blockchain-engineers-with-new-macos-malware-tbt68775.html">https://thebittimes.com/north-korea-targets-blockchain-engineers-with-new-macos-malware-tbt68775.html</a></p>

North Korea targets blockchain engineers with new macOS malware

TheBitTimes

Other articles published on Nov 2, 2023

PayPal registered to offer crypto services in the UK, with restrictions

Tether issues $610M debt financing to Bitcoin miner Northern Data

UAE issues DLT regulation allowing issuance of governance tokens

Bitcoin and Ethereum Set for New All-Time Highs in Q1 2024? Here’s What to Expect

Scroll Origins NFT, a Potential Airdrop Feature

PayPal receives SEC subpoena regarding its $156M market cap PYUSD stablecoin – Reuters

Join our free newsletter for daily crypto updates!