New post Need visibility? Apply for a FREE post for your Startup.  Apply Here


North Korean Hackers Now Steal Cryptocurrency Via Telegram – Kaspersky Warns

2 Mins read

Kaspersky, a Moscow-based cyber security firm, has warned cryptocurrency users to expect more attacks from North Korean hackers.

Kaspersky added that North Korean hackers have developed “enhanced capabilities” to deliver malware through Telegram messaging app.

The cyber security firm said that its lab has been analyzing new attacks from the Lazarus Group.

Lazarus group is a cybercrime group that has active links with North Korea.

Kaspersky lab said its analysis is aimed at determining how Lazarus Group’s techniques have developed since the AppleJesus attack on cryptocurrency exchange companies, in 2018.

According to the research paper published by Kaspersky, the cyber security firm said there have been “significant changes to the group’s attack methodology.”

The paper presents a case study which involved a move that appears to be a software update for a fake cryptocurrency wallet. Once the update is downloaded, it begins to transmit user data to hackers.

Another example involves creating a backdoor for Mac software that bypasses security mechanisms without the computer ever being aware it was under attack.

Kaspersky found out a new attack tactics. This tactic involves delivering malware via files distributed on the Telegram messaging app.

Researchers found that several computers download manipulated software, whose origin can be traced to Lazarus group’s website.

These softwares are embedded with malware that would send sensitive data to hackers – without the victim being aware.

Read also: Amidst Rising Tensions, India Bans More Chinese Apps

Many of these channels belong to fake cryptocurrency companies, presumably set up by the hackers themselves.

One of the recently detected fake sites was for a “smart cryptocurrency arbitrage trading platform.

Kaspersky researchers discovered that these websites were usually incomplete and filled with broken links, aside from the ones that took visitors to the Telegram channel.

Kaspersky said it has identified “several victims” from Poland, Russia, China and the U.K., most with links to cryptocurrency businesses.

Lazarus Group, however, has remain a mystery. According to experts, the group runs malware through computer memory, rather than a hard disk drive. This has enabled the group to avoid detection.

Lazarus group is widely believed to be affiliated with North Korea, although, the country has repeatedly denied responsibility for its attacks.

Group-IB – a cyber security firm, has estimated that Lazarus group stole about $600 million worth of cryptocurrency between 2017 and 2018.

Due to the success rate of Lazarus group’s operations, Kaspersky researchers are convinced the group will continue stealing cryptocurrency from unsuspecting victims.

This kind of attack on cryptocurrency businesses will continue and become more sophisticated,” the report says.

In 2019, the U.S. Department for Treasury placed Lazarus group on the U.S. sanctions list, subjecting any financial institution found dealing with the group, to sanctions.

632 posts

About author
When I'm not reading about tech, I'm writing about it, or thinking about the next weird food combinations to try. I do all these with my headphones plugged in, and a sticky note on my computer with the words: "The galaxy needs saving, Star Lord."
Related posts

WhatsApp Rolls Out Companion Mode to iOS Users, Enabling Multi-Device Connectivity

2 Mins read
WhatsApp, the popular messaging platform, has commenced the rollout of Companion Mode for iOS users, bringing multi-device connectivity to the platform. The…

Twitter Tests "Community Notes for Media" Feature to Address Misleading AI-generated Content

2 Mins read
As the prevalence of AI-generated images and videos grows on social media platforms like Twitter, the need to combat misleading and manipulated…
ArticleBig StoryNews

WhatsApp Begins Beta Testing Screen Sharing Feature for Video Calls

2 Mins read
WhatsApp, one of the leading messaging apps, is set to revolutionize communication with its latest update. The platform is rolling out a…
Get powered up with Techpadi Newsletter

Be the first to know what's happening in the African tech space

Leave a Reply