BlockBeats News, July 3rd. According to a report released on Wednesday by the cybersecurity company Sentinel Labs, North Korean hackers are using a new type of malware targeting Apple devices to attack cryptocurrency companies. The hackers impersonate trusted individuals on instant messaging applications like Telegram, sending fake Zoom update files that actually install malicious software named "NimDoor."
This malware is written in the rare Nim programming language, which can bypass Apple's memory protection mechanism and deploy an information-stealing program specifically targeting cryptocurrency wallets and browser passwords. Nim language, known for its ability to run unmodified on Windows, Mac, and Linux, along with its fast compilation speed and difficulty of detection, is becoming the new favorite of cybercriminals.
The malware also includes a script to steal the Telegram encrypted local database and decryption key, and it waits for 10 minutes before activation to evade security scans.
免责声明:投资有风险,本文并非投资建议,以上内容不应被视为任何金融产品的购买或出售要约、建议或邀请,作者或其他用户的任何相关讨论、评论或帖子也不应被视为此类内容。本文仅供一般参考,不考虑您的个人投资目标、财务状况或需求。TTM对信息的准确性和完整性不承担任何责任或保证,投资者应自行研究并在投资前寻求专业建议。