Collaborate Disseminate
To attack macOS users, the Lazarus group has developed homemade macOS malware, and added an authentication mechanism to deliver the next stage payload very carefully, as well as loading the next-stage payload without touching the disk. Continue reading Operation AppleJeus Sequel
An unprecedented connection between the North Korean APT and the crimeware giant spells trouble for global banks and other cybercrime targets. Continue reading Lazarus APT Collaborates with Trickbot’s Anchor Project
A state-sponsored tool most likely used by Chinese advanced persistent threat group APT41 was discovered inside the Linux servers of an undisclosed telecom company, surveilling incoming and outgoing SMS messages. FireEye Mandiant recently identified a … Continue reading Researchers Find SMS Monitoring Malware in Linux Telecom Servers
A hacking collective called the Lazarus Group has been trying to compromise MacOS systems in an elaborate scam involving cryptocurrency software and a realistic-looking website. Lazarus Group, a gang of hackers believed to be sponsored by North Korea, … Continue reading North Korean Hackers Tried to Infect macOS Systems with Fake Cryptocurrency App
When we first discovered ATMDtrack, we thought we were just looking at another ATM malware family. Now we can add another family to the Lazarus group’s arsenal: ATMDtrack and Dtrack. Continue reading Hello! My name is Dtrack
The FBI and Department of Homeland Security have identified a new strain of malware from North Korea, representing the latest in a long line of cyber attacks from the country Continue reading Feds hook ELECTRICFISH, new Windows malware from North Korea
Threat actors have the know-how to develop campaigns that target your weakest link. Learn how Lazarus APT took their malware to Apple’s macOS platform.
The post Lazarus APT Targets Mac Users with Poisoned Word Document appeared first on Security Boulev… Continue reading Lazarus APT Targets Mac Users with Poisoned Word Document
Further tracking of Lazarus activities targeting the financial sector enabled us to discover a new operation, active since at least November 2018, which utilizes PowerShell to control Windows systems and macOS malware for Apple users. Continue reading Cryptocurrency businesses still being targeted by Lazarus
Officials in Jackson County, a rural area in the southeastern US state of Georgia, were forced over the weekend to pay hackers almost half a million dollars after a ransomware attack brought its entire fleet of computer systems to its knees. According … Continue reading Jackson County pays ransomware operators $400k to regain access to computers
As President Donald Trump and North Korea’s Kim Jong Un prepare to meet again, cybersecurity researchers say Pyongyang-linked hackers are targeting Korean speakers with spearphishing emails tied to the diplomatic summit. The suspected North Korean hackers sent out a lure document last week purporting to be from a non-government organization, according to South Korean company ESTsecurity. The invitation from the “Korea-U.S. Friendship Society” invites recipients to a meeting in the South Korean capital of Seoul to analyze the results of the Trump-Kim summit, which begins Wednesday. Trump and Kim will discuss North Korea’s nuclear program, which, along with hacking tools, is a key pillar of the regime’s foreign policy. The spearphishing document was formatted in a South Korean word-processing application and came with malicious code associated with North Korean operatives, said ESTsecurity, a company that multiple independent researchers say does good analytical work. Cybersecurity company CrowdStrike has seen that same […]
The post North Korean hackers go on phishing expedition before Trump-Kim summit appeared first on CyberScoop.
Continue reading North Korean hackers go on phishing expedition before Trump-Kim summit