Palo Alto Networks Unit 42’s Post

#thisweekinmalware Episode 221 Part 1: TodoSwift #Malware Targets #Crypto Users, Possible Link To North Korean BlueNoroff https://lnkd.in/e9gpfPZT #Cryptocurrency #infosec #cybersec #cybersecurity #cyberattack #cybercrime #hackers #BlueNoroff #MalwareAttack

Breaking News: North Korean hackers have been identified as the perpetrators behind the $235 million theft from Indian crypto exchange WazirX, according to Cyfirma. This major breach underscores the growing cybersecurity threats facing the crypto industry. #CyberSecurity #Crypto #WazirX #Hackers #NorthKorea #DigitalAssets #Cyfirma https://lnkd.in/gMPK5U4F

🚨 BEWARE: North Korean threat group Kimsuky is targeting South Korean cryptocurrency firms with a previously undocumented Golang-based malware.    The novel malware, dubbed “Durian,” is equipped with comprehensive backdoor functionality, enabling the execution of delivered commands, additional file downloads, and exfiltration of files. According to @The Hacker News, these attacks leverage legitimate South Korean software to establish a connection between the victim and the attacker’s server, paving the way for Durian and other malicious tools.    Read the full article: https://lnkd.in/gKsQkJFC    #MalwareMonday #CyberSecurity #Malware #Durian #Crypto #BackDoor #Kimsuky  🤓 Chris Anthony Laura Nolan Tony Cantafio Matt Quirion Vic Macias Don K.

May 20, 2024 -  Reports have emerged of a new infostealer, dubbed SamsStealer, circulating in the threat landscape. This malware covertly infiltrates victims' systems, exfiltrating various forms of personal data, including login credentials, cryptocurrency wallets, session data, and browsing history. The stolen data is transmitted to file-sharing services and messaging platforms like Telegram, which are used as command-and-control (C2) servers by the attackers. https://lnkd.in/gBcpic6a

⚠️ Warning: Cyber threats ahead! ⚠️ If you have come across this warning before, swipe and read on to armor up your crypto defenses and trade like a pro. #KoinBX #cryptosecurity #crypto #wallets #2fa

#CyberAlerts Cyber threat actors are employing YouTube videos with content related to cracked software to trick users into downloading Lumma, an information-stealing malware, warns Fortinet FortiGuard Labs researcher Cara Lin. These YouTube videos, often featuring content associated with cracked applications, present users with deceptive installation guides and malicious URLs, frequently shortened using services like TinyURL and Cuttly. This strategy, not new to the cyber landscape, has previously been observed delivering various types of malware, including stealers, clippers, and crypto miners, allowing threat actors to compromise machines for information and cryptocurrency theft, as well as resource abuse for illicit mining. Read More: https://lnkd.in/g4GGX9QX #YouTube #Lumma #Infostealers #Malware #Fortinet

Inferno Malware, masquerading as #Coinbase, orchestrated a year-long cybercrime spree, siphoning $87 million from the wallets of 137,000 unsuspecting victims. The attackers exploited #Web3 protocols, creating over 16,000 fake domains mimicking 100 #crypto brands. Despite the criminal operation's halt, the incident underscores the persistent threats looming over the crypto market, urging heightened vigilance among users. Read full story: https://lnkd.in/g2p7BFps

💡 Did You Know? Physical Hacking of crypto wallets is real! Keep hardware and paper wallets secure and in multiple locations. https://lnkd.in/ghYUER6h

Stay Vigilant Against Cryptojacking Scams: Cybercriminals exploit your device's resources to mine cryptocurrency secretly. Safeguard your devices with robust security and stay informed to avoid falling victim to this stealthy threat. #Scamstall #ScamAwareness #CyberSecurity #DigitalSafety #StayInformed

🛡️5 Steps to Strengthen Web Security in Crypto for 2024 💻 👇👇 Read more: https://lnkd.in/g5P2pq4Y (page 36) #Crypto #Web3 #Security #cybersecurite