- North Korea’s hacker group targets crypto experts with malware.
- Malware targets over 80 browser extensions.
- Potential $5.2 million loss in crypto.
Famous Chollima, a North Korean hacker group, recently launched phishing attacks against cryptocurrency experts, impersonating companies like Coinbase and Robinhood.
This attack highlights ongoing security threats in the crypto industry, potentially leading to credential theft and financial losses.
North Korean Group Uses PylangGhost in New Attacks
Famous Chollima’s latest malware attack involved creating fake recruitment websites to lure job seekers, especially those with blockchain experience in India and elsewhere. PylangGhost, the malware deployed, is a Python-based Trojan capable of gathering sensitive data from over 80 browser plug-ins. Victims were targeted during fake video interviews, during which malware was deployed to execute malicious commands.
Credential theft risks remain high, particularly in the cryptocurrency sector, with targeted data including wallet credentials and password manager access. The impersonation of reputed firms like Coinbase and Robinhood intensifies the severity, increasing vulnerability among cryptocurrency practitioners.
No immediate statements from major exchanges or regulatory bodies have surfaced, although a broad-based concern about continued North Korean cyber threats is evident. Security experts like Vanja Svajcer from Cisco Talos emphasize the malware’s similarity to past campaigns, further raising awareness.
Crypto Sector Faces $5.2 Million Threat from Hackers
Did you know? North Korea-linked groups have stolen over $220 million from cryptocurrency sectors in the last three years, emphasizing the persistent threat to digital asset security.
According to CoinMarketCap, Ethereum (ETH) maintains a price of $2,552.56 and a market cap of $308.15 billion, with a trading volume decrease of 29.99% over 24 hours. While ETH experienced a 1.58% rise over a week, it gained 55.39% over 60 days, indicating strong recent performance despite macro-level threats.
Research from Coincu suggests an ongoing increase in the level of sophistication in cyber threats. The financial impact includes significant potential losses and also challenges existing regulatory measures, stressing a need for more robust defensive strategies across the crypto ecosystem.
DISCLAIMER: The information on this website is provided as general market commentary and does not constitute investment advice. We encourage you to do your own research before investing. |
Source: https://coincu.com/344431-north-korean-crypto-phishing-attack/