Darktrace warns of social engineering scams deploying crypto-stealing malware

Key Points

1. Scammers pose as cryptocurrency payments in exchange for testing software to lure victims.

2. North Korean hackers target macOS, collecting verification details like CPU info, MAC address, and user ID to determine viable targets.

3. A second-stage payload is deployed if verification succeeds, often stealing wallet credentials, browser data, and encrypted Telegram files.

4. Groups like CrazyEvil create fake software companies using platforms like Twitter and Medium to target crypto-related communities.

5. Lazarus hacking group deployed malware strains like 'NimDoor' and 'OtterCookie' through fake interviews or malicious SDK updates.