North Korean crypto hacking pab pawg yoog nws cov kev tawm tsam

North Kauslim hacking pab pawg TA444 feem ntau yog tsom rau crypto, tab sis cov kws tshawb fawb kev ruaj ntseg hais tias nws tab tom tua phishing tawm tsam rau lwm lub hom phiaj.

raws li tsom xam los ntawm CoinGecko, crypto hacks thiab exploits mus txog $ 2.8 billion nyob rau hauv 2022, uas yog tus thib ob loj tshaj tus nqi nyiag txij li lub infamous Silk Road hack ntawm 2012.

Hackers tab tom hloov kho thiab txhim kho lawv cov kev ua si txhawm rau ua kom zoo dua ntawm kev lag luam cryptocurrency uas tseem tab tom kawm thaum nws nce mus. Hacking pab pawg tawm ntawm North Kauslim tab tom noj ib feem loj ntawm lub ncuav qab zib hauv qhov kev hwm no, thiab ib pab pawg tshwj xeeb, TA444, tab tom hloov kho thiab hloov pauv.

Nyob rau hauv ib tug tsab xov xwm ntawm lub vev xaib kev ruaj ntseg Data Breach Hnub no, tau tshaj tawm tias cov kws tshawb fawb tau taug qab North Kauslim hacking pab pawg TA444, uas nyob rau ib hlis yuav luag ob npaug ntawm cov spam uas nws xa mus rau 11 lub hlis dhau los.

TA444 tseem yog lwm pab pawg neeg nyiag nkas los koom nrog lwm tus uas suav nrog: APT38, Bluenoroff, BlackAlicanto, Stardust Chollima thiab Copernicium pawg.

Cov kws tshawb fawb ntawm Proofpoint hais tias qhov kev ua haujlwm tsis ntev los no los ntawm TA444 tuaj yeem ua pov thawj tias pab pawg yog "tig deb ntawm cov tuam txhab loj cryptocurrency thiab nyiaj txiag".

Cov lus siv hauv kev tawm tsam los ntawm TA444 txog tam sim no tau ua lus Askiv, Mev, Polish, thiab Nyij Pooj. Phishing emails tau hais tias "ua tau zoo" thiab muaj "cov ntsiab lus ntxias" nyob rau hauv daim ntawv ntawm kev them nyiaj siab ua haujlwm, thiab hloov nyiaj hli.

Cov ntaub ntawv txhaum cai niaj hnub no tsab xov xwm qhia txog hom payloads uas spam emails xa:

"Lub phishing emails xa cov nyiaj them poob haujlwm muaj nyob rau hauv ob hom ntaub ntawv - cov ntaub ntawv LNK tsis txaus ntseeg thiab cov saw hlau pib nrog cov ntaub ntawv siv cov qauv chaw taws teeb. TA444 tseem siv ob txoj hauv kev tab sis tam sim no tseem siv lwm hom ntaub ntawv xws li MSI Installer cov ntaub ntawv, virtual hard drive, ISO los hla Windows Mark ntawm lub vev xaib, thiab suav nrog HTML.

Nrog TA444 tswj kev nyiag ntau dua $ 1 nphom hauv 2022, kev txhim kho ntawm 2021 tag nrho ntawm $ 400 lab, pab pawg kev kawm nrawm thiab hloov kho no yuav muaj txiaj ntsig zoo ntawm kev ruaj ntseg rau kev tawm tsam nws cov haujlwm.

Tsis kam lees: Cov lus no tsuas yog muab ua kev qhia xov xwm nkaus xwb. Nws tsis yog muab los yog npaj rau siv raws li kev cai lij choj, se, peev, nyiaj txiag, lossis lwm yam kev qhia.

Tau qhov twg los: https://cryptodaily.co.uk/2023/01/north-korean-crypto-hacking-group-adapts-its-attacks