朝鲜黑客针对加密招聘部署新型恶意软件,支持从浏览器扩展窃取凭证

Blockbeats
Yesterday

BlockBeats 消息,6 月 20 日,据 Decrypt 报道,威胁情报研究公司 Cisco Talos 周三报告,朝鲜黑客通过伪装成 Coinbase 和 Uniswap 等公司招聘人员的假面试,针对加密货币专业人士部署了名为“PylangGhost”的新型 Python 远程访问木马,该恶意软件与朝鲜相关著名黑客团体“Famous Chollima”(又称“Wagemole”)有关。

该恶意软件可从超过 80 个浏览器扩展中窃取凭证,包括 Metamask 和 1Password,并实现持久化远程访问。攻击主要针对 Windows 系统以及 macOS 用户,Linux 系统未受当前攻击波及。

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Most Discussed

  1. 1
     
     
     
     
  2. 2
     
     
     
     
  3. 3
     
     
     
     
  4. 4
     
     
     
     
  5. 5
     
     
     
     
  6. 6
     
     
     
     
  7. 7
     
     
     
     
  8. 8
     
     
     
     
  9. 9
     
     
     
     
  10. 10