"Esta aplicación comparte varios comportamientos con el malware que hemos visto que se originó en Corea del Norte (RPDC), específicamente el actor de amenazas conocido como BlueNoroff, como KANDYKORN y RustBucket ", dijo en un análisis el investigador de seguridad de Kandji, Christopher López .

New macOS Malware TodoSwift Linked to North Korean Hacking Groups

New macOS malware TodoSwift, linked to North Korean hacking groups, targets crypto-industry with advanced tactics.

Lazarus Group är det huvudsakliga samlingsnamnet som används idag (för: BlueNorOff/AndAriel/Kimsuky/Ricochet Chollima/Bureau 121/Unit 180). De är fortfarande högst aktiva, men jag ser ingen klar motivation. WannaCry vad dom, men att nu köra LB ist för deras egna tools är konstigt.

"Phishing by Appointment: Suspected North Korean Hackers Target Blockchain Community Via Telegram" published by Hunt. #Phishing, #BlueNoroff, #CTI, #OSINT, #LAZARUS hunt.io/blog/suspected-north-korean-hackers-target-blockchain-community-via-telegram

"Analyzing DPRK's SpectralBlur" published by Objecive-see. #SpectralBlur, #BlueNoroff, #macOS, #CTI, #OSINT, #LAZARUS objective-see.org/blog/blog_0x78.html

"New BlueNoroff loader for macOS" published by Kaspersky. #RustBucket, #BlueNoroff, #macOS, #CTI, #OSINT, #LAZARUS securelist.com/bluenoroff-new-macos-malware/111290/

"DPRK Crypto Theft | macOS RustBucket Droppers Pivot to Deliver KandyKorn Payloads" published by SentinelOne. #RustBucket, #BlueNoroff, #macOS, #KandyKorn, #CTI, #OSINT, #LAZARUS www.sentinelone.com/blog/dprk-crypto-theft-macos-rustbucket-droppers-pivot-to-deliver-kandykorn-payloads/

@infosec.skyfleet.blue No new BlueNoroff info?

Watch out - that amazing job offer could actually just be a crypto-stealing scam, Microsoft warns - The BlueNoroff cybercrime campaign appears to be going from strenght to strenght after Microsoft spotted yet another criminal campaign it attributed to the North Korean hackers....

Watch out - that amazing job offer could actually just be a crypto-stealing scam, Microsoft warns

Hackers have started impersonating skills assessment platforms

"북한 라자루스(Lazarus) 산하 BlueNorOff(블루노로프) 만든 맥OS 악성코드-ProcessRequest(2023.11.7)" published by Sakai. #BlueNoroff, #macOS, #CTI, #OSINT, #LAZARUS wezard4u.tistory.com/6654

Microsoft: BlueNoroff hackers plan new crypto-theft attacks

Microsoft: BlueNoroff hackers plan new crypto-theft attacks

Microsoft warns that the BlueNoroff North Korean hacking group is setting up new attack infrastructure for upcoming social engineering campaigns on LinkedIn.