Markets News Report
November 01, 2023

North Korean Hackers Target Blockchain Engineers with Deceptive Crypto Bot

In Brief

Elastic Security Labs Sheds Light on Sophisticated macOS Malware Scheme by Lazarus Group

North Korean Hackers Target Blockchain Engineers with Deceptive Crypto Bot

In a revealing update from Elastic Security Labs, North Korea notorious Lazarus Group has emerged as the culprits behind an intricate hacking scheme aimed at blockchain engineers.

The hackers wielded a Python application, deceitfully presented as a cryptocurrency arbitrage bot, which they disseminated through direct messages on public Discord servers.

While it’s not uncommon for cybercriminals to exploit Discord’s massive user base for nefarious purposes, what’s striking in this particular instance is the malware’s design for macOS systems. Typically, macOS intrusions are not orchestrated in such a manner.

Elastic Security Labs chanced upon this malware during an analysis where they noticed an unusual attempt to load a binary into memory on a macOS device. This led them to uncover the aforementioned Python application linked to the intrusion.

Several factors cemented Lazarus Group’s involvement, including similarities in techniques, network infrastructure, and code-signing certificates. Additionally, the malware bore certain signature traits associated with previous attacks by the North Korea Lazarus Group. Elastic Security Labs has cataloged this specific intrusion pattern under the label REF7001.

Here’s a concise breakdown of the unfolding events:

  1. Lazarus Group, under the DPRK’s banner, baited blockchain engineers using a Python application as the initial point of entry.
  2. This malware exhibited multi-layered complexities, each specifically designed to dodge security defenses.
  3. Contrary to standard macOS malware attacks, this strategy revolved around loading binaries into the macOS system’s memory.

Blockchain engineers and crypto enthusiasts should exercise caution, especially when they receive unsolicited software recommendations or tools on platforms like Discord. The Lazarus Group’s continued evolution in its cyber-espionage tactics underscores the persistent threat they pose to the crypto industry and beyond.

Disclaimer

In line with the Trust Project guidelines, please note that the information provided on this page is not intended to be and should not be interpreted as legal, tax, investment, financial, or any other form of advice. It is important to only invest what you can afford to lose and to seek independent financial advice if you have any doubts. For further information, we suggest referring to the terms and conditions as well as the help and support pages provided by the issuer or advertiser. MetaversePost is committed to accurate, unbiased reporting, but market conditions are subject to change without notice.

About The Author

Nik is an accomplished analyst and writer at Metaverse Post, specializing in delivering cutting-edge insights into the fast-paced world of technology, with a particular emphasis on AI/ML, XR, VR, on-chain analytics, and blockchain development. His articles engage and inform a diverse audience, helping them stay ahead of the technological curve. Possessing a Master's degree in Economics and Management, Nik has a solid grasp of the nuances of the business world and its intersection with emergent technologies.

More articles
Nik Asti
Nik Asti

Nik is an accomplished analyst and writer at Metaverse Post, specializing in delivering cutting-edge insights into the fast-paced world of technology, with a particular emphasis on AI/ML, XR, VR, on-chain analytics, and blockchain development. His articles engage and inform a diverse audience, helping them stay ahead of the technological curve. Possessing a Master's degree in Economics and Management, Nik has a solid grasp of the nuances of the business world and its intersection with emergent technologies.

Hot Stories

How GAMEE Is Making Web3 Irresistibly Fun

by Victoria d'Este
May 09, 2025
Join Our Newsletter.
Latest News

The Calm Before The Solana Storm: What Charts, Whales, And On-Chain Signals Are Saying Now

Solana has demonstrated strong performance, driven by increasing adoption, institutional interest, and key partnerships, while facing potential ...

Know More

Crypto In April 2025: Key Trends, Shifts, And What Comes Next

In April 2025, the crypto space focused on strengthening core infrastructure, with Ethereum preparing for the Pectra ...

Know More
Read More
Read more
How STON.fi’s Omniston is Making DeFi Simpler — and What’s Coming Next
Interview Business Markets Technology
How STON.fi’s Omniston is Making DeFi Simpler — and What’s Coming Next
May 9, 2025
How GAMEE Is Making Web3 Irresistibly Fun
Interview Business Markets Technology
How GAMEE Is Making Web3 Irresistibly Fun
May 9, 2025
Bitget Announces Strategic Partnership With SWEAT To Boost Movement Economy In Web3
News Report Technology
Bitget Announces Strategic Partnership With SWEAT To Boost Movement Economy In Web3
May 9, 2025
Lorenzo Protocol Evolves Into Institutional-Grade On-Chain Asset Management Platform With New Upgrade
News Report Technology
Lorenzo Protocol Evolves Into Institutional-Grade On-Chain Asset Management Platform With New Upgrade
May 9, 2025