The Hacker News - A North Korean-linked group is targeting cryptocurrency businesses with phishing emails and notarized macOS malware disguised as PDF files, using social engineering and advanced evasion techniques to bypass detection

https://thehackernews.com/2024/11/north-korean-hackers-target-crypto.html

A North Korean-affiliated threat group, BlueNoroff, is using sophisticated phishing and malware campaigns to target cryptocurrency businesses, often disguising malicious applications as PDF files and using social engineering to gain employees' trust.

The "Hidden Risk" campaign, observed by SentinelOne, employs notarized macOS malware with novel persistence methods, bypassing traditional Apple notifications to evade detection.

This activity, alongside other campaigns by North Korean hackers targeting developers with booby-trapped job offers, highlights the need for vigilance among cryptocurrency and decentralized finance sectors to protect against increasingly creative and persistent cyber threats.