Stablecoin

New Era

Apple

WazirX

Cosmos

North Korean hackers seem to have created malware that evaded Apple security checks. The apps seem to be experimental, Apple-focused Jamf Threat Labs researchers say. It was the first time they had seen this technology used to compromise Apple’s macOS operating system, but it will not run on up-to-date systems.
<h2 id="weaponizing-a-security-weakness">Weaponizing a security weakness</h2>
The Jamf Threat Labs researchers found apps with malicious intent that were reported as clean by Microsoft’s VirusTotal online scanning service. They were found in variants written in the Go and Python languages and using the Google Flutter app.
Flutter is an open-source developer kit that enables the creation of multi-platform apps.
Five of the six malicious apps had developer account signatures and had been temporarily notarized by Apple. The researchers <a data-ct-non-breakable="null" href="https://www.jamf.com/blog/jamf-threat-labs-apt-actors-embed-malware-within-macos-flutter-applications/" rel="null" target="null" text="null" title="null">wrote</a>:
<blockquote>
 “The domains and techniques in the malware align closely with those used in other DPRK [Democratic People’s Republic of Korea — North Korea] malware and show signs that, at one point in time, the malware was signed and had even temporarily passed Apple’s notarization process.”
</blockquote>
“It’s unclear in this case if the malware has been used against any targets or if the attacker is preparing for a new form of delivery,” they added. They concluded it was “likely testing for greater weaponization.”
The malware had names associating them with cryptocurrency, such as “New Updates in Crypto Exchange,” “New Era for Stablecoins and DeFi,” “CeFi” and “Multisig Risks in Stablecoin and Crypto Assets,” which hinted at the hackers’ ultimate target. When “New Updates in Crypto Exchange” was executed, it opened a modified minesweeper game.
Related: <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/235m-wazirx-crypto-exchange-hack-india" rel="" target="_self" text="null" title="https://cointelegraph.com/news/235m-wazirx-crypto-exchange-hack-india">$235M WazirX exchange hack has implications for India’s crypto industry</a>
<h2 id="organized-hackers-do-it-best">Organized hackers do it best</h2>
North Korean hackers have a reputation for ingenuity. They were <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/north-korean-lazarus-group-chrome-zero-day-nft-game-hack" rel="" target="_self" text="null" title="https://cointelegraph.com/news/north-korean-lazarus-group-chrome-zero-day-nft-game-hack">caught exploiting a vulnerability</a> in Chrome in October to steal crypto wallet credentials. Allegations were made the same month that North Koreans <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/cosmos-lsm-built-north-korean-developers-security-concerns" rel="" target="_self" text="null" title="https://cointelegraph.com/news/cosmos-lsm-built-north-korean-developers-security-concerns">had had a hand in developing the Cosmos network Liquid Staking Module</a>.
<figure>
 <img alt="North Korean malware evades Apple notarization, targets macOS users" src="https://s3.cointelegraph.com/uploads/2024-11/01932164-5aa4-7f94-a386-98543caf0a4d" title="">
 <figcaption style="text-align: center;">
 Source: <a data-ct-non-breakable="null" href="https://x.com/JamfSoftware/status/1854179435227775435" rel="nofollow noopener" target="_blank" text="null" title="https://x.com/JamfSoftware/status/1854179435227775435">Jamf</a>
 </figcaption>
</figure>
The hackers are highly organized and allegedly <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/zachxbt-claims-21-north-korea-crypto-devs-making-500k-month" rel="" target="_self" text="null" title="https://cointelegraph.com/news/zachxbt-claims-21-north-korea-crypto-devs-making-500k-month">take in hundreds of thousands</a> of dollars worth of cryptocurrency a month and have <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/united-nations-north-korea-crypto-hackers" rel="" target="_self" text="null" title="https://cointelegraph.com/news/united-nations-north-korea-crypto-hackers">made approximately $3 billion</a> in the last six years, according to the United Nations.
Magazine:&nbsp;<a data-ct-non-breakable="null" href="https://cointelegraph.com/magazine/north-korean-hackers-private-keys-flash-loan-attacks/" rel="" target="_self" text="null" title="https://cointelegraph.com/magazine/north-korean-hackers-private-keys-flash-loan-attacks/">Lazarus Group’s favorite exploit revealed — Crypto hacks analysis</a>

North Korean malware evades Apple notarization, targets macOS users

Table of Contents

Cointelegraph

Other articles published on Nov 12, 2024

XRP price rare pattern points to Ripple hitting $1

Analyst Forecasts Potential +140% Gain to $15.75, is RUNE Ready for a Breakout?

50% of Large Investors Predict Crypto Market Peak in H2 2025 with Bitcoin Expected to Hit $100K+

ZettaBlock Launches Kite AI, the Foundation Layer for AI, Unlocking Fair Access to AI Assets for All

Shiba Inu Ready for a 300% Surge as Burn Rate Hits Record High?

Bitcoin Surge Boosts Toncoin Interest and Prices

Join our free newsletter for daily crypto updates!