headphones
慢雾:朝鲜Lazarus正使用名为OtterCookie的新型窃密木马,针对加密从业者发起定向攻击
暴哥正能量
暴哥正能量
authIcon
趋势研究员
Follow

6 月 6 日,慢雾安全团队最新情报显示,朝鲜 Lazarus 黑客组织正在使用名为 OtterCookie 的新型窃密木马,针对加密货币及金融从业者发起定向攻击。


共计手法包括伪造高薪职位面试/投资人洽谈、使用深度伪造 (Deepfake) 视频冒充招聘方、将恶意软件伪装成「编程测试题」或「系统更新包」。


窃取目标包括浏览器保存的登录凭证、macOS 钥匙串中的密码与数字证书,以及加密钱包信息及私钥。


慢雾建议,对主动提供的职位/投资邀约保持警惕,远程面试需多重验证,切勿运行来历不明的可执行文件,尤其是所谓「技术测试题」或「更新补丁」,强化终端防护 (EDR),部署杀毒软件并定期排查异常进程。

Open the app to read the full article
DisclaimerAll content on this website, hyperlinks, related applications, forums, blog media accounts, and other platforms published by users are sourced from third-party platforms and platform users. BiJieWang makes no warranties of any kind regarding the website and its content. All blockchain-related data and other content on the website are for user learning and research purposes only, and do not constitute investment, legal, or any other professional advice. Any content published by BiJieWang users or other third-party platforms is the sole responsibility of the individual, and has nothing to do with BiJieWang. BiJieWang is not responsible for any losses arising from the use of information on this website. You should use the related data and content with caution and bear all risks associated with it. We strongly recommend that you independently research, review, analyze, and verify the content.
Comments(0)

No comments yet

edit
comment
collection
like
share