SentinelOne: Lazarus hackers infect computers of job applicants in the crypto industry – Bits Media

North Korean hacker group began hunting for MacOS users, who are looking for work in the field of cryptocurrencies.

Cybersecurity operating in the field of Sentinelone, that hackers Lazarus group use fake vacancies in Singapore cryptocurrency exchange Crypto.com. They send phishing mailing with vacancies and, If the user has shown interest, Trying to infect his computer.

According to Sentinelone analysts, Lazarus hackers used the same harmful in, as with a similar attack, когда пользователей завлекали вакансиями на бирже Coinbase. For this, attackers provide a PDF file with high-quality design and a list of vacancies. Then the victims are sent the executable file MACH-O, which sets an agent on a PC of users. This agent downloads and establishes the very harmful on. It is still unknown, what exactly does the virus do, but, It is likely, that the personal data of users will steal, Addresses and passwords from cryptocurrency wallets, Credit card data and so on.

Previously reported, that Lazarus hackers steal users on the LinkedIn social network and try to get into various cryptocurrency companies. In case of success and access to access to systems of companies, attackers are trying to get insider information and create backdors, which will allow the use of these platforms later.