BlueNoroff Fake Zoom Phishing Targets Crypto Wallets Before Malware Drop

BlueNoroff Fake Zoom Phishing Targets Crypto Wallets Before Malware Drop

JUMPSEC‘s recovery of live source code from an active phishing kit has exposed how BlueNoroff fake Zoom phishing operates: the kit scans a target’s browser for connected wallets before the operators decide whether to push malware at all. The North Korea-linked group, described by Picus Security as the financial cybercrime arm of Lazarus and active since at least 2014, exposed JavaScript source maps on its own live infrastructure. That slip let J…