MacBooks are being targeted by North Korean hackers: What to do
Remember those nice North Korean hackers who destroyed Sony Pictures' computers, spread the WannaCry ransomware worm around the world and stole $100 million from the central bank of Bangladesh? Well, they're back, and they're attacking Macs.
Malwarebytes researchers said today (May 6) that the Lazarus Group, also known as Hidden Cobra, has repurposed the Linux variant of the Dacls remote-access Trojan (RAT) to work on Macs. RATs sneak onto a machine and give a remote attacker partial or full control.
"This Mac version is at least distributed via a Trojanized two-factor authentication application for macOS called MinaOTP, mostly used by Chinese speakers," a Malwarebytes blog post explained. "It boasts a variety of features including command execution, file management, traffic proxying and worm scanning."
