North Korean Hackers Target Crypto Job Recruiters with New Malware, Able to Steal Credentials from Browser Extensions

Blockbeats
6 hours ago

BlockBeats News, June 20th, According to Decrypt's report, threat intelligence research firm Cisco Talos reported on Wednesday that North Korean hackers deployed a new Python Remote Access Trojan called "PylangGhost" targeting cryptocurrency professionals through a fake job interview posing as companies like Coinbase and Uniswap. The malware is associated with the North Korean-affiliated notorious hacking group "Famous Chollima" (also known as "Wagemole").

The malware is capable of stealing credentials from over 80 browser extensions, including Metamask and 1Password, and achieves persistent remote access. The attack mainly targets Windows systems and macOS users, with Linux systems not currently affected by this wave of attacks.

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Most Discussed

  1. 1
     
     
     
     
  2. 2
     
     
     
     
  3. 3
     
     
     
     
  4. 4
     
     
     
     
  5. 5
     
     
     
     
  6. 6
     
     
     
     
  7. 7
     
     
     
     
  8. 8
     
     
     
     
  9. 9
     
     
     
     
  10. 10