United

TRON

Security

Discord

The Lazarus Group has left a trail of crypto hacks throughout 2023, stealing millions of dollars. So far, Their targets have been Atomic Wallet, <a href="https://news.todayq.com/crypto-betting-giant-stake-grapples-with-41-million-security-breach/" rel="noopener noreferrer nofollow">Stake.com</a>, Alphapo, CoinEx, and CoinsPaid.
Since June, they have <a href="https://news.todayq.com/report-2-billion-worth-of-cryptocurrency-stolen-by-north-korean-hackers-in-last-five-years/" rel="noopener noreferrer nofollow">stolen nearly $240 million in cryptocurrencies</a>. The United States Federal Bureau of Investigation has <a href="https://news.todayq.com/fbi-identifies-lazarus-group-in-41-million-stake-crypto-theft/" rel="noopener noreferrer nofollow">accused</a> the group of being behind the Coinex and Stake attack.
Now, in a shockingrevelation, Elastic Security Labs revealed a new malicious software known as ‘Kandykorn’ by the Lazarus Group. This advanced malware has left experts consfused by its complexity and execution. 
According to Elastic, the attackers posed as blockchain engineers. They targeted other engineers from the unnamed crypto exchange on a public Discord server.
They have designed a profitable arbitrage bot that could exploit price differences between cryptocurrencies on different exchanges. The engineers were convinced to download this “bot,” disguised as an arbitrage tool with files like “config.py” and “pricetable.py.” The ‘Kandykorn’ attack chain 
Elastic Security Labs delves into the intricate attack chain of ‘Kandykorn.’ This malware deploys a meticulously orchestrated five-stage process to remain undetected, showcasing its formidable capabilities. It begins with a Python script, ‘watcher.py,’ initiating a connection to a remote Google Drive account, leading to the download of concealed payloads.
The discovery of the ‘Kandykorn’ malware highlights the evolving landscape of cyber threats and the pressing need for robust security measures in the cryptocurrency space. As the Lazarus Group continues to evolve and expand its activities, the cryptocurrency community must remain vigilant. Lazarus group is a massive crypto whale 
Latest reports reveal that have become a <a href="https://news.todayq.com/north-koreas-lazarus-group-emerges-as-tron-trx-whale-with-137-million-trx-holdings/" target="_blank" rel="noopener noreferrer nofollow">whale of TRON</a> (TRX) through illicit means. As per security firm PeckShield, the group has collected over 137 million TRX, equivalent to approximately $11.63 million. It represents 0.154% of the total TRON supply. They have a total market capitalization of $7.5 billion with a total supply of 89 billion TRX tokens.
© Todayq News

North Korean Lazarus Group’s ‘Kandykorn’ malware strikes Crypto exchanges

Todayq News

Other articles published on Nov 2, 2023

MATIC: The Hidden Gem Ready to Shine?

Analyst Touts Uniswap’s UNI as the Next Potential Breakout Asset; Investment Experts Also Recomme...

U.S. Congress Members Tackle Crypto Terrorism

PayPal faces SEC action related to PYUSD stablecoin: Report

Scarlett Johansson Takes Legal Action Against AI App for Unauthorized Use of Her Likeness

Bitcoin Flirts with $36,000 as Rally Seems Unstoppable

Join our free newsletter for daily crypto updates!