Havoc

Cryptocurrency

April

Coin

What’s the news 
A North Korean Hacker group known as Kimsuky, has been using a new type of malicious software called "Durian" to attack cryptocurrency companies in South Korea. This Durian malware’s function resembles an installer and installs other powerful tools on the victimized machines. These tools include the backdoor called "Appleseed" and the proxy tool called LazyLoad.
Appleseed gives hackers the privilege to remotely control the infected computers and also steal private information, while LazyLoad allows them to use tools that can help them hide their tracks. It is worthwhile to mention that LazyLoad which is used by another North Korean <a href="https://www.coingabbar.com/en/crypto-currency-news/pi-network-and-the-rising-scams-panic-investors" title="hacking" class="f-link" rel="noopener noreferrer nofollow">hacking </a>group called Andariel has been used by a larger group called Lazarus. Since 2009, Lazarus has been notorious for its role in cryptocurrency thefts.&nbsp;
On 29 April 2024, an independent blockchain Sleuth ZachXBT, who is not affiliated with any governmental organization revealed that Lazarus laundered over $200 million in stolen cryptocurrency between 2020 and 2023. Lazarus has been reported to have stolen approximately $3 billion worth of cryptocurrency in six years, with the largest amount being taken in 2023. They were the ones who were responsible for the stealing of 17% of all the stolen cryptocurrency funds in that year, which was over $309 million in 2023. On December 28, hackers exploited around $1.8 million worth of crypto which was lost as per the previous year's report.
<h4 style="text-align: justify;">Malicious Software that Exploited Cryptocurrency Firms</h4>
Durian Malware
This is a new type of software developed by the North Korean hacking group known as Kimsuky which is used to attack the South Korean targets. The sanctions are imposed on cryptocurrency companies located in South Korea. Durian is like a program that installs other harmful programs on the targeted computers. These tools include the backdoor "Appleseed", a custom proxy tool known as "LazyLoad" and other authorized tools such as "Chrome Remote Desktop".
Appleseed
This is a backdoor installed by Durian malware. A backdoor is a hidden way into a computer system that allows hackers to get into this system without authorization. Through the Appleseed exploit, the hackers may be able to remotely control the infected computer, execute commands, download additional files, and steal confidential data. The hackers take over the machine and steal everything stored on it through Appleseed.
LazyLoad
LazyLoad is a tool that Durian malware installs as well. This is a custom proxy tool that hides the hacker's activities. Another hacking group known as Andariel was also using it as well as a part of the Lazarus Group which is much larger and more established. LazyLoad is a way for them to keep their activities away from the public eye.
<h4 style="text-align: justify;">The impact of these malicious software</h4>
The fact that North Korean hackers have been using malware such as Durian, AppleSeed, and LazyLoad against South Korean<a href="https://www.coingabbar.com/en/crypto-currency-news/scam-in-the-name-of-pi-network-trap-the-users" title="cryptocurrency" class="f-link" rel="noopener noreferrer nofollow"> cryptocurrency</a> companies should be a cause for concern. These tools enable hackers to get into a system without authorization, steal confidential information, and cause monetary losses.
<h4 style="text-align: justify;">Prevention from malicious software</h4>
<ul>
 <li>Keep all software and safety systems up-to-date.</li>
 <li>Employ strong passwords and multi-factor authentication.</li>
 <li>Do not click on those emails and links that are not trustworthy and unauthentic</li>
 <li>Frequently store critical information.</li>
 <li>Implement cybersecurity best practices through firewalls, intrusion detection systems, and antivirus software.</li>
</ul>
<h4 style="text-align: justify;">Conclusion</h4>
The essentialities that Coin Gabbar has pointed out from the news is that the Durian malware and the connection of this malware to North Korean hacking groups like Kimsuky and Lazarus is proof of the ongoing cyber threat to these firms. It highlights the necessity of strong cybersecurity measures and intensive scrutiny to counter such attacks. These organizations need to have robust cybersecurity mechanisms and keep a close watch against them. Partnerships among cybersecurity firms, governments, and cryptocurrency companies are necessary to realize an efficient way of tackling these concerns.
Also Read: <a href="https://www.coingabbar.com/en/crypto-currency-news/elon-musks-deepfake-video-leads-fraud-in-hong-kong" title="Musk’s Deepfake Video Leads To Crypto Fraud In Hong Kong" class="f-link" rel="noopener noreferrer nofollow">Musk’s Deepfake Video Leads To Crypto Fraud In Hong Kong</a>

North Korean Hackers Storm Play Havoc With Crypto Firms

Coingabbar

Other articles published on May 13, 2024

Pepe Pumps 8% And Millionaire Trader Thinks Will Become 'So Nutty Soon' That His $1M Investment W...

Swiss Banking Giant UBS Jumps on Bitcoin ETF Train

Explore Profitable Passive Income with MAR Mining Post-BTC Halving

Mark Cuban Schools Crypto Critic, Blames SEC For FTX-Like Events: 'This Is An Institutional Failure'

Recent Trends and Predictions for Polygon (MATIC) in the Crypto Market

What Happened To BODEN’s Bullish Momentum?

Join our free newsletter for daily crypto updates!