The California-based cybersecurity company SentinelOne reported that Apple has updated its built-in antivirus software, XProtect, to block the Ferret malware linked to North Korea. The malware can compromise systems and steal funds from cryptocurrency wallets. Bad actors from North Korea often pose as recruiters from reputable companies on LinkedIn, attracting potential victims with appealing pay ranges. They send victims a link for a video interview, but when recording, victims receive a message blocking camera and mic access. They are then prompted to use the Terminal app to fix the issue, which installs a backdoor to drain victims' cryptocurrency wallets. North Korean hackers reportedly stole $659 million worth of crypto in 2022, and cases have been reported of fraudulent employees hired by unsuspecting companies. In 2023, North Korean hackers impersonated Meta recruiters on LinkedIn.
Content Editor ( u.today )
- 2025-02-04
North Korean Hackers Targeting Crypto Wallets of MacOS Users
