Bitcoin

<p>The <a href="https://cryptotale.org/coinspaid-loses-7-5-million-in-cyber-theft-lazarus-group-suspected/" rel="noopener noreferrer nofollow">Lazarus Group</a>, a North Korean hacking organization notorious for targeting the crypto industry, is intensifying its efforts with more advanced malware campaigns. Recent <a href="https://www.group-ib.com/blog/apt-lazarus-python-scripts/?data&#61;7sd78e8denis89h269omelchenko8yrjs8" rel="noopener noreferrer nofollow">research</a> by cybersecurity firm Group-IB reveals the group has expanded its scope in 2024, introducing new malware variants and shifting focus to professionals in the cryptocurrency sector, including developers. A new method involving video conferencing applications is now part of their strategy, adding to the growing sophistication of their attacks.</p><h2 id="header-0">Malware Disguised as Job-Related Tools</h2><p>One of the group’s latest campaigns, referred to as the “Contagious Interview,” involves tricking job seekers into downloading malicious software under the guise of technical tasks. In this scheme, a fake video conferencing app called “FCCCall” is used to install the BeaverTail malware on targeted systems. Once active, BeaverTail retrieves credentials from browsers and extracts sensitive data from cryptocurrency wallet extensions. Additionally, the malware deploys a backdoor known as “InvisibleFerret,” a Python-based tool that further compromises systems.</p><p>Related: <a href="https://cryptotale.org/lazarus-group-targets-crypto-investors-through-linkedin-impersonation/" rel="noopener noreferrer nofollow">https://cryptotale.org/lazarus-group-targets-crypto-investors-through-linkedin-impersonation/</a></p><p>This method of attack has evolved to include the distribution of Node.js projects as part of job-related activities. Lazarus members typically move the conversation to Telegram, where they convince their targets to download the fake applications.</p><h2 id="header-1">Gaming and Wallet Extension Tactics</h2><p>In addition to targeting job seekers, Lazarus has broadened its focus to include gaming repositories, utilizing trojanized Node.js-based projects to spread malware. Group-IB’s findings indicate that the group has incorporated Python scripts, labeled “CivetQ,” into their arsenal.</p><p><a href="https://cryptotale.org/lazarus-targets-crypto-industry-with-new-malware-variants/" rel="noopener noreferrer nofollow">Read more on Cryptotale.</a></p><p><strong>Visit the links for more information </strong><a href="https://cryptotale.org/" rel="noopener noreferrer nofollow">Website</a> | <a href="https://twitter.com/cryptotalemedia" rel="noopener noreferrer nofollow">Twitter </a>| <a href="https://t.me/cryptotale_news" rel="noopener noreferrer nofollow">Telegram </a>| <a href="https://www.instagram.com/cryptotalenews/" rel="noopener noreferrer nofollow">Instagram </a>|</p>

Lazarus Targets Crypto Industry with New Malware Variants

Table of Contents

CryptoTale

Other articles published on Sep 4, 2024

Immutable And Portal Join Hands To Bring NFT Games To The Masses

Why Is Monero (XMR) Price Up?

Analyst launches BTC miner M&A deal tracker

Binance Labs Invests in Four BNB Chain Projects

FBI Warns of North Korean Scammers Aggressively Targeting Crypto Firms

Rollblock Price and Volume Surge Hitting $3M Raised; Polkadot’s Inter Miami Partnership, Near Pro...

Join our free newsletter for daily crypto updates!