ZachXBT

April

North Korean hackers are reportedly utilizing a “striking” new malware variant dubbed “Durian” to launch attacks on South Korean crypto firms.
The North Korean hacking group Kimsuky used the new malware in a series of targeted attacks on at least two cryptocurrency firms so far, <a href="https://securelist.com/apt-trends-report-q1-2024/112473/" target="_blank" rel="noopener nofollow">according</a> to a May 9 threat report from cybersecurity firm Kaspersky. 
This was done through a “persistent” attack by exploiting legitimate security software used exclusively by crypto firms in South Korea. 
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-05/93a78037-5066-4c87-a105-a526b1b359e3.png" alt="" title="">
 <figcaption style="text-align: center;">
 Source: <a href="https://twitter.com/kaspersky/status/1788614943018827969" target="_blank" rel="noopener nofollow">Kaspersky</a>
 </figcaption>
</figure>
The previously unknown Durian malware acts as an installer that deploys a continued stream of malware, including a backdoor known as “AppleSeed,” a custom proxy tool known as LazyLoad and other legitimate tools such as Chrome Remote Desktop.
“Durian boasts comprehensive backdoor functionality, enabling the execution of delivered commands, additional file downloads, and exfiltration of files,” wrote Kaspersky.
Additionally, Kaspersky noted that LazyLoad was also used by Andariel, a sub-group within fellow North Korean hacking consortium Lazarus Group — suggesting a “tenuous” connection between Kimsuky and the more notorious hacking group. 
Related: <a href="https://cointelegraph.com/news/north-korean-lazarus-linkedin-target-steal-assets">North Korean Lazarus hacker group using LinkedIn to target and steal assets: Report</a>
First emerging in 2009, Lazarus has established itself as one of the most notorious groups of crypto hackers. 
On April 29, independent blockchain sleuth ZachXBT revealed that the Lazarus group had successfully laundered over $200 million in ill-gotten crypto between 2020 and 2023.
The Lazarus Group is accused of&nbsp;<a href="https://cointelegraph.com/news/north-korean-hackers-stolen-crypto">stealing over $3 billion in crypto</a> assets in the six years leading up to 2023.
Lazarus was credited with stealing over 17% — a little over $309 million — of the total stolen funds in 2023. Throughout 2023,&nbsp;<a href="https://cointelegraph.com/news/1-8-billion-lost-web3-hackers-fraudsters-2023-immunefi">more than $1.8 billion</a> worth of crypto was lost to hacks and exploits, according to a Dec. 28 report by Immunefi.
Magazine: <a href="https://cointelegraph.com/magazine/north-korean-hackers-private-keys-flash-loan-attacks/">Lazarus Group’s favorite exploit revealed — Crypto hacks analysis</a>

North Korean hackers deploy ‘Durian’ malware, targeting crypto firms

Cointelegraph

Other articles published on May 13, 2024

Kiyosaki sits down with Kinesis to Talk ‘The Evolution of Money’

Do Traditional Investors See Bitcoin as Risk Asset?

Roaring Kitty Returns: GameStop Stock ($GME) Surges Over 40% in Pre-Market Trading

Bitfarms Shares Plunged After CEO Firing

Bitcoin Dominance Keeps Surging as Altcoins Plunge

Future-Proof Your Portfolio: Top Crypto Coins to Consider Hodling Amidst Tightening Regulations

Join our free newsletter for daily crypto updates!