Apple

Security

Discord

A new hacking method continues to emerge in the blockchain ecosystem, causing significant security concerns and a loss of trust in an area that has attracted the attention of many investors. According to Elastic Security Labs, a new malicious software associated with the North Korean hack group Lazarus has been detected in Apple’s macOS system.
<h2 class="p1" style="text-align: justify" id="new-attack-method-draws-attention">New Attack Method Draws Attention</h2>
According to a research conducted by Elastic Security Labs, the macOS malware called KandyKorn possesses dangerous features such as data retrieval, directory listing, file upload or download, secure deletion, process termination, and command execution.
<img decoding="async" class="aligncenter wp-image-273156 size-full" src="https://coin-turk.com/wp-content/uploads/2023/11/macos-grafik.png" alt="" width="1600" height="922">
The above flowchart explains the steps taken by the malware to infiltrate targeted users’ computers and obtain their data. Hackers initially aim to distribute Python-based modules by impersonating the identities of community members through Discord channels.
Social hack attacks encourage <a href="https://en.coin-turk.com/opbnb-based-ai-project-myshell-raises-5-6-million-investment/" data-wpel-link="internal" rel="noopener noreferrer nofollow">Web3</a> community members to download a malicious ZIP file named ‘Cross-platform Bridges.zip’ that masquerades as an arbitrage bot designed to automatically generate profits. However, the file injects 13 malicious modules that work together to steal information and seize data. The report published by Elastic Security states:
<blockquote>
 “We observed that the threat actor adopted a technique known as process hijacking, which we have not seen them use before to persist on macOS.”
</blockquote>
<h2 class="p1" style="text-align: justify" id="lazarus-targets-cryptocurrencies">Lazarus Targets Cryptocurrencies</h2>
The cryptocurrency sector continues to be the primary target for the North Korean hack group Lazarus. This hacking group is primarily motivated by <a href="https://newslinker.co/category/finance/" data-wpel-link="exclude" rel="noopener noreferrer nofollow">financial</a> gains obtained through hack attacks rather than global espionage, their other main focus.
The presence of the KandyKorn virus demonstrates that macOS is within Lazarus’ scope, showcasing the threat group’s exceptional ability to produce specially designed and discreet malicious software for Apple computers.
<img decoding="async" class="aligncenter wp-image-273158" src="https://coin-turk.com/wp-content/uploads/2023/11/scopescan-tweet.png" alt="" width="550" height="669">
A recent vulnerability in the contracts of Unibot, a popular Telegram bot used for trading on the decentralized cryptocurrency exchange Uniswap, caused a 40% drop in token price within an hour. <a href="https://en.coin-turk.com/friend-tech-generates-over-1-million-in-commission-revenue-in-24-hours/" data-wpel-link="internal" rel="noopener noreferrer nofollow">Blockchain</a> analysis firm Scopescan issued a warning about an ongoing attack:
<blockquote>
 “We experienced a token approval exploit from our new router and have halted the router to contain the issue.”
</blockquote> Continue Reading: <a href="https://en.coin-turk.com/new-malware-linked-to-lazarus-hack-group-discovered-in-apples-macos-system/" data-wpel-link="internal" rel="noopener noreferrer nofollow">https://en.coin-turk.com/new-malware-linked-to-lazarus-hack-group-discovered-in-apples-macos-system/</a>

New Malware Linked to Lazarus Hack Group Discovered in Apple’s macOS System

Table of Contents

COINTURK NEWS

Other articles published on Nov 3, 2023

Elon Musk’s xAI set to launch to select group tomorrow

Cathie Wood: “Bitcoin is the only asset to store for the next 10 years”

WeFi newsletter — November Edition

Enter the Kissanverse, a Real-Time Metaverse Gaming Environment Powered by KSN Token.

XRP Dominates Indian Exchange Trading Together With Bitcoin

Here’s all you need to know on Sam Bankman-Fried’s guilty verdict

Join our free newsletter for daily crypto updates!