DPRK Hackers Use ClickFix to Deliver BeaverTail Malware in Crypto Job Scams

North Korean Hackers Use BeaverTail Malware to Steal Crypto Data - Blockonomi

TLDR North Korean hackers are targeting non-developer job applicants in the cryptocurrency sector. The attackers use BeaverTail and InvisibleFerret malware to steal login credentials and crypto wallets. Both macOS and Windows users are advised to avoid suspicious downloads from GitHub and Vercel. The malware is disguised as a fix for fake microphone or camera errors during video recording. North Korean hackers have shifted their focus from deve…

North Korean Hackers Hit Crypto Sector With BeaverTail Malware

Bad actors from North Korea are using fake cryptocurrency jobs in order to spread malware

North Korean Hackers Deploy ‘ClickFix’ Tactic to Steal from Crypto Firms

In the shadowy world of state-sponsored cyber espionage, North Korean hackers have refined their tactics to exploit human vulnerabilities with chilling precision. Recent campaigns reveal a sophisticated blend of social engineering and malware deployment, where attackers masquerade as legitimate entities to trick victims into compromising their own systems. According to a detailed report from The Hacker News, these operations often involve the “C…

DPRK Hackers Use ClickFix to Deliver BeaverTail Malware in Crypto Job Scams

Threat actors with ties to the Democratic People's Republic of Korea (aka DPRK or North Korea) have been observed leveraging ClickFix-style lures to deliver a known malware called BeaverTail and InvisibleFerret. "The threat actor used ClickFix lures to target marketing and trader roles in cryptocurrency and retail sector organizations rather than targeting software development roles," GitLab