"If you use a MacBook, you'll be hacked"...Lazarus group distributes 'new malware' targeting cryptocurrency executives

▲ Lazarus, North Korean hacker, virtual asset hacking/AI generated image

Security warnings are rapidly spreading as the North Korean hacking group Lazarus distributes macOS malware specifically targeting key figures in the cryptocurrency industry.

According to Cointelegraph on April 23 (local time), the Lazarus group is recently focusing its new malware attacks, aimed at the macOS environment, on high-value individuals such as cryptocurrency company executives and developers. This attack is carried out in a sophisticated manner, combining social engineering techniques rather than simple technical vulnerabilities.

According to security industry analysis, this attack utilized macOS-specific malware called 'Mach-O Man'. This malware is specialized in stealing cryptocurrency wallet access rights and sensitive financial data. The targets are mainly key decision-makers at exchanges, blockchain projects, and fintech companies.

The attack method is very cunning. Hackers approach victims with fake video conference invitations or job offers as bait, then induce the victims to enter specific commands into the macOS terminal. During this process, malware is installed, and system access rights are stolen.

The Lazarus group has been identified as an organization involved in multi-billion dollar cryptocurrency hacking incidents in the past, and has recently been strengthening its attack strategies that exploit human psychology rather than technical vulnerabilities.

This attack is evaluated as another case that exposes the overall security vulnerabilities of the cryptocurrency industry. In particular, the level of vigilance is increasing among companies and executives who use macOS-based work environments.

*Disclaimer: This article is for investment reference only and we are not responsible for any investment losses based on it. The content should be interpreted for informational purposes only.*