Not just an infostealer: Gopuram backdoor deployed through 3CX supply chain attack

A DLL named guard64.dll, which was loaded into the infected 3CXDesktopApp.exe process, was used in recent deployments of a backdoor that we dubbed “Gopuram” and had been tracking internally since 2020. Continue reading Not just an infostealer: Gopuram backdoor deployed through 3CX supply chain attack

UN Experts: North Korean Hackers Stole Record Virtual Assets

North Korean hackers working for the government stole virtual assets last year estimated to be worth between $630 million and more than $1 billion, U.N. experts said in a report.

The post UN Experts: North Korean Hackers Stole Record Virtual Assets appeared first on SecurityWeek.

Continue reading UN Experts: North Korean Hackers Stole Record Virtual Assets

FBI Confirms North Korean Hackers Behind $100 Million Horizon Bridge Heist

FBI says a North Korea-linked threat group known as Lazarus and APT38 is behind the $100 million Horizon bridge cryptocurrency heist.

The post FBI Confirms North Korean Hackers Behind $100 Million Horizon Bridge Heist appeared first on SecurityWeek.

Continue reading FBI Confirms North Korean Hackers Behind $100 Million Horizon Bridge Heist

Fake Windows Crypto Apps Spreading AppleJeus Malware

By Deeba Ahmed
The infamous North Korean state-backed Lazarus hacking group is using AppleJeus malware to steal crypto funds from Windows users.
This is a post from HackRead.com Read the original post: Fake Windows Crypto Apps Spreading AppleJeus Malware
Continue reading Fake Windows Crypto Apps Spreading AppleJeus Malware

North Korean cyberespionage actor Lazarus targets energy providers with new malware

Lazarus, a North Korean cyberespionage group, keeps hitting energy providers in the U.S., Canada and Japan with a new malware arsenal.
The post North Korean cyberespionage actor Lazarus targets energy providers with new malware appeared first on TechRe… Continue reading North Korean cyberespionage actor Lazarus targets energy providers with new malware

US Blacklists Tornado Cash, GitHub Removes Co-Founder in Response

By Deeba Ahmed
The US Treasury Department has blacklisted Tornado Cash on the accusation that the platform helped bad actors harvest…
This is a post from HackRead.com Read the original post: US Blacklists Tornado Cash, GitHub Removes Co-Founder i… Continue reading US Blacklists Tornado Cash, GitHub Removes Co-Founder in Response

IT threat evolution Q1 2022

Kaspersky IT threat review in Q1 2022: activity of APTs such as MoonBounce, BlueNororff, Lazarus and Roaming Mantis, attacks against Ukraine, phishing kits, Okta hack and more. Continue reading IT threat evolution Q1 2022