• bitcoinBitcoin (BTC) $ 62,470.00
  • ethereumEthereum (ETH) $ 2,444.76
  • tetherTether (USDT) $ 1.00
  • bnbBNB (BNB) $ 567.88
  • solanaSolana (SOL) $ 145.22
  • usd-coinUSDC (USDC) $ 1.00
  • xrpXRP (XRP) $ 0.527002
  • staked-etherLido Staked Ether (STETH) $ 2,444.42
  • dogecoinDogecoin (DOGE) $ 0.109492
  • tronTRON (TRX) $ 0.162659
  • the-open-networkToncoin (TON) $ 5.13
  • cardanoCardano (ADA) $ 0.345948
  • avalanche-2Avalanche (AVAX) $ 28.42
  • wrapped-stethWrapped stETH (WSTETH) $ 2,893.16
  • shiba-inuShiba Inu (SHIB) $ 0.000017
  • wrapped-bitcoinWrapped Bitcoin (WBTC) $ 62,325.00
  • wethWETH (WETH) $ 2,446.34
  • chainlinkChainlink (LINK) $ 10.65
  • bitcoin-cashBitcoin Cash (BCH) $ 319.53
  • suiSui (SUI) $ 2.19
  • daiDai (DAI) $ 1.00
  • polkadotPolkadot (DOT) $ 4.11
  • uniswapUniswap (UNI) $ 7.66
  • leo-tokenLEO Token (LEO) $ 6.11
  • nearNEAR Protocol (NEAR) $ 4.59
  • aptosAptos (APT) $ 9.75
  • litecoinLitecoin (LTC) $ 64.60
  • bittensorBittensor (TAO) $ 639.83
  • wrapped-eethWrapped eETH (WEETH) $ 2,570.32
  • pepePepe (PEPE) $ 0.000009
  • internet-computerInternet Computer (ICP) $ 7.75
  • fetch-aiArtificial Superintelligence Alliance (FET) $ 1.39
  • kaspaKaspa (KAS) $ 0.130505
  • first-digital-usdFirst Digital USD (FDUSD) $ 0.998031
  • moneroMonero (XMR) $ 151.58
  • polygon-ecosystem-tokenPOL (ex-MATIC) (POL) $ 0.362190
  • ethereum-classicEthereum Classic (ETC) $ 18.39
  • stellarStellar (XLM) $ 0.089901
  • dogwifcoindogwifhat (WIF) $ 2.63
  • blockstackStacks (STX) $ 1.69
  • okbOKB (OKB) $ 41.65
  • ethena-usdeEthena USDe (USDE) $ 0.999857
  • immutable-xImmutable (IMX) $ 1.47
  • aaveAave (AAVE) $ 151.87
  • whitebitWhiteBIT Coin (WBT) $ 15.31
  • optimismOptimism (OP) $ 1.66
  • filecoinFilecoin (FIL) $ 3.50
  • render-tokenRender (RENDER) $ 5.25
  • crypto-com-chainCronos (CRO) $ 0.075509
  • mantleMantle (MNT) $ 0.600007
  • injective-protocolInjective (INJ) $ 19.76
  • arbitrumArbitrum (ARB) $ 0.521013
  • hedera-hashgraphHedera (HBAR) $ 0.049940
  • fantomFantom (FTM) $ 0.659543
  • vechainVeChain (VET) $ 0.021947
  • cosmosCosmos Hub (ATOM) $ 4.25
  • sei-networkSei (SEI) $ 0.455492
  • thorchainTHORChain (RUNE) $ 4.72
  • the-graphThe Graph (GRT) $ 0.159021
  • bitget-tokenBitget Token (BGB) $ 1.08
  • binance-peg-wethBinance-Peg WETH (WETH) $ 2,443.91
  • bonkBonk (BONK) $ 0.000021
  • popcatPopcat (POPCAT) $ 1.39
  • rocket-pool-ethRocket Pool ETH (RETH) $ 2,739.95
  • flokiFLOKI (FLOKI) $ 0.000134
  • celestiaCelestia (TIA) $ 5.94
  • theta-tokenTheta Network (THETA) $ 1.25
  • mantra-daoMANTRA (OM) $ 1.45
  • arweaveArweave (AR) $ 18.61
  • mantle-staked-etherMantle Staked Ether (METH) $ 2,551.11
  • gatechain-tokenGate (GT) $ 9.19
  • makerMaker (MKR) $ 1,318.12
  • pyth-networkPyth Network (PYTH) $ 0.311763
  • solv-btcSolv Protocol SolvBTC (SOLVBTC) $ 62,238.00
  • heliumHelium (HNT) $ 6.20
  • jupiter-exchange-solanaJupiter (JUP) $ 0.776730
  • worldcoin-wldWorldcoin (WLD) $ 1.95
  • based-brettBrett (BRETT) $ 0.101049
  • algorandAlgorand (ALGO) $ 0.119535
  • ondo-financeOndo (ONDO) $ 0.685140
  • kucoin-sharesKuCoin (KCS) $ 8.12
  • matic-networkPolygon (MATIC) $ 0.362224
  • ethenaEthena (ENA) $ 0.345441
  • quant-networkQuant (QNT) $ 64.50
  • lido-daoLido DAO (LDO) $ 1.02
  • jasmycoinJasmyCoin (JASMY) $ 0.018657
  • bitcoin-svBitcoin SV (BSV) $ 44.51
  • bittorrentBitTorrent (BTT) $ 0.00000090
  • spx6900SPX6900 (SPX) $ 0.928742
  • aerodrome-financeAerodrome Finance (AERO) $ 1.33
  • neiro-3Neiro (NEIRO) $ 0.002053
  • fasttokenFasttoken (FTN) $ 2.56
  • galaGALA (GALA) $ 0.021111
  • coredaoorgCore (CORE) $ 0.897574
  • flowFlow (FLOW) $ 0.533102
  • ether-fi-staked-ethether.fi Staked ETH (EETH) $ 2,418.15
  • wormholeWormhole (W) $ 0.302652
  • starknetStarknet (STRK) $ 0.410321
  • renzo-restaked-ethRenzo Restaked ETH (EZETH) $ 2,493.80
  • notcoinNotcoin (NOT) $ 0.007609
  • msolMarinade Staked SOL (MSOL) $ 177.26
  • beam-2Beam (BEAM) $ 0.014580
  • conflux-tokenConflux (CFX) $ 0.165582
  • usddUSDD (USDD) $ 0.997885
  • klay-tokenKlaytn (KLAY) $ 0.126790
  • flare-networksFlare (FLR) $ 0.014542
  • neoNEO (NEO) $ 10.30
  • elrond-erd-2MultiversX (EGLD) $ 26.36
  • mog-coinMog Coin (MOG) $ 0.000002
  • ordinalsORDI (ORDI) $ 33.97
  • eosEOS (EOS) $ 0.464701
  • axie-infinityAxie Infinity (AXS) $ 4.58
  • tezosTezos (XTZ) $ 0.682692
  • chilizChiliz (CHZ) $ 0.074175
  • paypal-usdPayPal USD (PYUSD) $ 1.00
  • tokenize-xchangeTokenize Xchange (TKX) $ 8.34
  • nervos-networkNervos Network (CKB) $ 0.014798
  • ecasheCash (XEC) $ 0.000033
  • eigenlayerEigenlayer (EIGEN) $ 3.52
  • tether-goldTether Gold (XAUT) $ 2,662.01
  • fraxFrax (FRAX) $ 0.997503
  • mina-protocolMina Protocol (MINA) $ 0.552392
  • pendlePendle (PENDLE) $ 3.96
  • axelarAxelar (AXL) $ 0.771306
  • arbitrum-bridged-wbtc-arbitrum-oneArbitrum Bridged WBTC (Arbitrum One) (WBTC) $ 62,394.00
  • the-sandboxThe Sandbox (SAND) $ 0.257740
  • akash-networkAkash Network (AKT) $ 2.44
  • turboTurbo (TURBO) $ 0.008719
  • kelp-dao-restaked-ethKelp DAO Restaked ETH (RSETH) $ 2,506.24
  • cat-in-a-dogs-worldcat in a dogs world (MEW) $ 0.006572
  • dydx-chaindYdX (DYDX) $ 0.903333
  • sats-ordinalsSATS (Ordinals) (SATS) $ 0.00000027
  • aleoALEO (ALEO) $ 2.70
  • superfarmSuperVerse (SUPER) $ 1.22
  • nexoNEXO (NEXO) $ 0.981584
  • ethereum-name-serviceEthereum Name Service (ENS) $ 16.57
  • roninRonin (RON) $ 1.56
  • decentralandDecentraland (MANA) $ 0.292450
  • lombard-staked-btcLombard Staked BTC (LBTC) $ 62,268.00
  • book-of-memeBOOK OF MEME (BOME) $ 0.007586
  • zcashZcash (ZEC) $ 34.38
  • dog-go-to-the-moon-runeDOG•GO•TO•THE•MOON (Runes) (DOG) $ 0.005195
  • arbitrum-bridged-weth-arbitrum-oneArbitrum Bridged WETH (Arbitrum One) (WETH) $ 2,443.70
  • pax-goldPAX Gold (PAXG) $ 2,670.43
  • beldexBeldex (BDX) $ 0.076198
  • l2-standard-bridged-weth-baseL2 Standard Bridged WETH (Base) (WETH) $ 2,442.50
  • pancakeswap-tokenPancakeSwap (CAKE) $ 1.79
  • aioz-networkAIOZ Network (AIOZ) $ 0.443902
  • jupiter-staked-solJupiter Staked SOL (JUPSOL) $ 151.71
  • coinbase-wrapped-staked-ethCoinbase Wrapped Staked ETH (CBETH) $ 2,643.04
  • true-usdTrueUSD (TUSD) $ 0.998682
  • terra-lunaTerra Luna Classic (LUNC) $ 0.000086
  • arkhamArkham (ARKM) $ 1.72
  • baby-doge-coinBaby Doge Coin (BABYDOGE) $ 0.00000000
  • dexeDeXe (DEXE) $ 8.34
  • apecoinApeCoin (APE) $ 0.703180
  • gigachad-2Gigachad (GIGA) $ 0.048918
  • blurBlur (BLUR) $ 0.241450
  • havvenSynthetix Network (SNX) $ 1.42
  • raydiumRaydium (RAY) $ 1.77
  • zksyncZKsync (ZK) $ 0.126842
  • safeSafe (SAFE) $ 0.951805
  • oasis-networkOasis (ROSE) $ 0.069005
  • trust-wallet-tokenTrust Wallet (TWT) $ 1.11
  • gnosisGnosis (GNO) $ 171.26
  • bridged-usdc-polygon-pos-bridgeBridged USDC (Polygon PoS Bridge) (USDC.E) $ 1.00
  • astarAstar (ASTR) $ 0.058749
  • layerzeroLayerZero (ZRO) $ 3.87
  • iotaIOTA (IOTA) $ 0.123371
  • xdce-crowd-saleXDC Network (XDC) $ 0.028276
  • frax-etherFrax Ether (FRXETH) $ 2,441.39
  • celoCelo (CELO) $ 0.766314
  • metaplexMetaplex (MPLX) $ 0.423095
  • livepeerLivepeer (LPT) $ 11.77
  • apenftAPENFT (NFT) $ 0.00000042
  • dydxdYdX (ETHDYDX) $ 0.901774
  • usdbUSDB (USDB) $ 0.996927
  • theta-fuelTheta Fuel (TFUEL) $ 0.059431
  • l2-standard-bridged-weth-blastL2 Standard Bridged WETH (Blast) (WETH) $ 2,442.62
  • super-oethSuper OETH (SUPEROETHB) $ 2,441.72
  • dogs-2Dogs (DOGS) $ 0.000763
  • constitutiondaoConstitutionDAO (PEOPLE) $ 0.077242
  • coinbase-wrapped-btcCoinbase Wrapped BTC (CBBTC) $ 62,417.00
  • compound-governance-tokenCompound (COMP) $ 43.52
  • bitcoin-goldBitcoin Gold (BTG) $ 21.83
  • ondo-us-dollar-yieldOndo US Dollar Yield (USDY) $ 1.07
  • echelon-primeEchelon Prime (PRIME) $ 7.83
  • osmosisOsmosis (OSMO) $ 0.536102
  • iotexIoTeX (IOTX) $ 0.039145
  • stepnGMT (GMT) $ 0.126708
  • ethereum-pow-iouEthereumPoW (ETHW) $ 3.41
  • binance-peg-busdBinance-Peg BUSD (BUSD) $ 1.00
  • polygon-pos-bridged-weth-polygon-posPolygon PoS Bridged WETH (Polygon POS) (WETH) $ 2,444.26
  • kavaKava (KAVA) $ 0.332929
  • bitcoin-avalanche-bridged-btc-bBitcoin Avalanche Bridged (BTC.b) (BTC.B) $ 62,456.00
  • dymensionDymension (DYM) $ 1.69
  • safepalSafePal (SFP) $ 0.700864
  • harrypotterobamasonic10inHarryPotterObamaSonic10Inu (ETH) (BITCOIN) $ 0.330455
  • reserve-rights-tokenReserve Rights (RSR) $ 0.006363
  • wemix-tokenWEMIX (WEMIX) $ 0.794515

Jamf Spots New MacOS Crypto Malware Attributed to North Korea’s Lazarus BlueNoroff Group

0 153

Jamf Spots New MacOS Crypto Malware Attributed to North Korea’s Lazarus BlueNoroff Group

  cryptonews.com 18 m

Jamf Spots New MacOS Crypto Malware Attributed to North Korea’s Lazarus BlueNoroff Group

BlueNoroff, the notorious hackers’ group with links to North Korea’s Lazarus, has debuted a fresh MacOS malware targeting financial institutions.

Uncovered by researchers from the Apple device management firm – Jamf, the perpetrators have been hiding behind a legitimate-looking cryptocurrency exchange.

According to a detailed report by Jamf published Tuesday, the malicious payload communicates with swissborg[.]blog domain, controlled by the attackers. The actors registered the domain on May 31 and hosted at an IP address, part of BlueNoroff infrastructure.

“The malware splits the command and control (C2) URL into two separate strings that get concatenated together. This is likely an attempt to evade static-based detection,” the report explains.

The news comes days after the infamous Lazarus Group used a new malware dubbed “Kandykorn” to target a crypto exchange. The group apparently deployed the advanced Kandykorn malware through a complex 5-stage process, featuring reflective loading.

BlueNoroff is a threat actor that specifically targets cryptocurrencies and crypto startups, and financial entities such as banks.

Jamf Threat Labs noted that the new malware, discovered at a later-stage, shares similar characteristics with BlueNoroff’s RustBucket campaign.

Identified in April this year, the campaign works to compromise macOS devices. Actors reach targets directly claiming to be an investor or head hunter, offering beneficial partnerships.

BlueNoroff also created a domain for the RustBucket campaign, that looks like it belongs to a legitimate crypto company. The aim was to blend with network activity to evade detection.

The Jamf team used the same method to detect the new malware. The new MacOS crypto-malware has links to several URLs from one domain, used for its communication, Jamf noted.

“The malware is written in Objective-C and operates as a very simple remote shell that executes shell commands sent from the attacker server.”

The perpetrators likely use the malware at a later stage to manually run commands after compromising a system, experts wrote. However, the researchers cleared that this malware at a glance is “very different” from the previously mentioned RustBucket malware.

“But the attacker’s focus in both cases seems to be providing simple remote shell capability,” they added.

Though the malware looks fairly simple it is “still very functional,” helping attackers carry out their objectives, the report said. The Jamf team names the new detection as “ObjCShellz,” considering it as a part of the RustBucket campaign.

“Based on previous attacks performed by BlueNoroff, we suspect that this malware was a late stage within a multi-stage malware delivered via social engineering.”

Source

Leave A Reply

Your email address will not be published.