North Korean hackers deploy ‘Durian’ malware, targeting crypto firms
Credit:
Coin Telegraph
North Korean hackers are utilizing a “striking” new malware variant dubbed “Durian” to reportedly launch attacks on South Korean crypto firms.
The North Korean hacking group Kimsuky used the new malware in a series of targeted attacks on at least two cryptocurrency firms so far, according to a May 9 threat report from cybersecurity firm Kaspersky.
This was done through a “persistent” attack by exploiting legitimate security software used exclusively by crypto firms in South Korea. The previously unknown Durian malware acts as an installer that deploys a continued stream of malware including a backdoor known as “AppleSeed,” a custom proxy tool known as LazyLoad, and other legitimate tools such as Chrome Remote Desktop.
