The first malware for Mac systems developed by infamous North Korean hacking group Lazarus has been discovered.
Researchers have fingered the Lazarus group for the destructive attack on Sony Pictures in 2014, as well as more recent financially-motivatedattacks on South Korean cryptocurrency exchanges, a spate of targeted ransomware attacks on corporations in the US and Europe, and multiple raids on banks through the industrys SWIFT system.
All of those attacks have targeted Windows systems, however researchers at Kaspersky Lab have found the groups first known malware targeting Apple macOS computers in the form of a hidden software updater for a seemingly bonafide app aimed at cryptocurrency traders called Celas Trade Pro.
But software was fake and the company behind it appears to have been bogus too, according to Kaspersky researchers.
The macOS malware was discovered while the company was investigating a breach at an unnamed Asian cryptocurrency exchange that its researchers believe was compromised by one of Lazarus malware tools called Fallchill, a remote access tool that US-CERT has filed under its investigation into North Koreas Hidden Cobra hacking activity.
Using a trojanized software updater for an application relevant to cryptocurrency trading was a notable difference to fake Flash Player updates spread through malicious ads aimed at the masses.
In this case, the hackers appear to have only wanted to snag people keen on installing cryptocurrency trading software, in this case Celas Trade Pro from a company claiming to be Celas LLC.
Including malicious code into distributed software and putting that on a website would be too obvious. Instead, the attackers went for a more elaborate scheme: the trojan code was pushed out in the form of an update for a trading application, Kaspersky Lab researchers note.
Celas Trade Pro didnt display malicious behavior and looked like a genuine cryptocurrency trading program developed by Celas, and was seemingly verified with a legitimate-looking digital certificate.
However the researchers found that the macOS installer includes a module that persists after a reboot and contacts a remote server to install more malware.
The malicious Celas Mac software was offered alongside a Windows executable that displayed the same behavior as the Mac malware. The site also flagged a Linux update was coming soon.
The fact that [the attackers] developed malware to infect macOS users in addition to Windows users and most likely even created an entirely fake software company and software product in order to be able to deliver this malware undetected by security solutions, means that they see potentially big profits in the whole operation, and we should definitely expect more such cases in the near future, Vitaly Kamluk of Kaspersky Lab said in a statement.
For macOS users this case is a wakeup call, especially if they use their Macs to perform operations with cryptocurrencies.
Read more: Olympic Destroyer destructive malware targets EU bio-weapons research groups
Error: Please check your email address.
Tags trojannorth koreakasperskyMacOSLazarus
More about AppleKasperskyKaspersky LabLinuxMacsSony
- Fidelity Said to Offer Cryptocurrency Trading Within a Few ... - May 10th, 2019
- Is This Cryptocurrency The Next Bitcoin? - forbes.com - April 28th, 2019
- Cryptocurrency Definition | Bankrate.com - April 26th, 2019
- Samsung is developing its own blockchain network, report claims - April 26th, 2019
- 2019s best cryptocurrency wallets | 70+ compared | finder.com - April 26th, 2019
- What is cryptocurrency? - Definition from WhatIs.com - April 25th, 2019
- A Beginner's Guide to Cryptocoin Mining: What You Need to ... - April 25th, 2019
- How Cryptocurrency Assets Are Becoming A New Battleground In ... - April 21st, 2019
- What is Cryptocurrency: Cryptocurrency Explained the Easy Way - April 13th, 2019
- How to trade cryptocurrency in the UK - finance.yahoo.com - April 8th, 2019
- Cryptocurrency Trading | TD Ameritrade - April 8th, 2019
- Cryptocurrency Prices, Charts, and Market Cap Data - UNHASHED - April 8th, 2019
- Blow To Bitcoin As World's Largest Cryptocurrency IPO Is Iced - April 2nd, 2019
- How and where do I report Cryptocurrency coin-to-coin ... - March 22nd, 2019
- Hundreds of Millions in Cryptocurrency Vanishes After ... - March 11th, 2019
- Fidelity's new cryptocurrency company is up and running ... - March 9th, 2019
- JPMorgan is creating its own cryptocurrency - CNN - March 6th, 2019
- Cryptocurrency Exchange Says It Can't Access $190 Million ... - February 5th, 2019
- What's the Best Cryptocurrency to Invest in Today? - January 9th, 2019
- Cryptocurrency Trading Easy tips to get started | AvaTrade - January 9th, 2019
- Thailand Issues 4 Cryptocurrency Licenses, Rejects 2 ... - January 9th, 2019
- NASDAQ, Fidelity Invest in New Cryptocurrency Exchange ... - January 9th, 2019
- Cryptocurrency News | Cryptocurrency News | Blockchain ... - January 9th, 2019
- Differences Between Cryptocurrency Coins and Tokens - January 9th, 2019
- Cryptocurrency Charts - January 8th, 2019
- What is cryptocurrency? - cointelegraph.com - January 4th, 2019
- Blockchain Will Survive A Cryptocurrency Apocalypse - January 1st, 2019
- Cryptocurrency - Simple English Wikipedia, the free encyclopedia - December 25th, 2018
- Is Cryptocurrency Dead for Good? | Investopedia - December 6th, 2018
- Cryptocurrency scammers dupe Singaporeans out of $78,000 in ... - December 6th, 2018
- Invest in Cryptocurrency With Spare Change - Black Enterprise - November 28th, 2018
- What is Mining Cryptocurrency? What you need to know... - November 26th, 2018
- Saudi Arabia Will Launch Its Own Cryptocurrency in 2019 ... - November 23rd, 2018
- Bitcoin and Other Cryptocurrency Prices Are Crashing Again ... - November 17th, 2018
- Homepage - Cryptocurrency Army - November 14th, 2018
- Cryptocurrency - Simple English Wikipedia, the free ... - November 14th, 2018
- How To Create Your Own Cryptocurrency - fastcompany.com - November 14th, 2018
- Cryptocurrency price plunge worse than bursting of dotcom ... - September 18th, 2018
- Iran, North Korea and Venezuela turning to cryptocurrency ... - September 12th, 2018
- SEC halts trading in two cryptocurrency products, citing ... - September 12th, 2018
- Cryptocurrency News, ICO Reviews & Blockchain Updates ... - September 9th, 2018
- Cryptocurrency "miners," utilities look for ways to get along ... - August 29th, 2018
- Cryptocurrency: Virtual money, real power, and the fight ... - August 28th, 2018
- Pornhub Now Accepts PumaPay Cryptocurrency - August 27th, 2018
- Cryptocurrency: The unlucky investors who got in at the wrong ... - August 26th, 2018
- cryptocurrency coins Archives - The Industry Spread - August 26th, 2018
- cryptocurrency Archives - Page 6 of 6 - The Industry Spread - August 26th, 2018
- Cryptocurrency investment in SMSF - hallandwilcox.com.au - August 26th, 2018
- How To Choose The Best Cryptocurrency Wallet - Crypto News AU - August 26th, 2018
- Courses | Cryptocurrency Australia - August 26th, 2018
- What Every Investor Should Know Before Buying Cryptocurrency ... - August 26th, 2018
- The biggest cryptocurrency hack in the history of blockchain - August 26th, 2018
- After the Bitcoin Boom: Hard Lessons for Cryptocurrency ... - August 21st, 2018
- Cryptocurrency Rankings | CryptoSlate - August 14th, 2018
- Bitcoin price falls after SEC postpones key ETF decision - August 12th, 2018
- Brokers Cryptocurrency Deals Are Focus of SEC Review ... - August 7th, 2018
- 7 Cryptocurrency Predictions for the Rest of 2018 - August 7th, 2018
- Have a Cryptocurrency Company? Bermuda, Malta or Gibraltar ... - July 31st, 2018
- Bitcoin price live: Latest updates as cryptocurrency ... - July 22nd, 2018
- 2018 Bahamas Blockchain & Cryptocurrency Conference - July 16th, 2018
- Best Cryptocurrency Trading Platform 2018 | Top Crypto ... - July 13th, 2018
- Cryptocurrency: Advantages And Disadvantages Explained - July 12th, 2018
- ATB Coin - The fastest and most secure payment system - June 19th, 2018
- An Illustrated Glossary of Cryptocurrency Slang (Infographic) - June 19th, 2018
- Apollo All-in-One Cryptocurrency - June 3rd, 2018
- Cryptocurrency News, ICO Database, Coin Rankings and ... - May 25th, 2018
- CoinLib - Cryptocurrency prices now - May 21st, 2018
- Cryptocurrency Market Capitalizations | CoinMarketCap - May 4th, 2018
- CryptoCurrency Market , Coin Prices & Charts, Crypto ... - April 28th, 2018
- Nasdaq open to cryptocurrency exchange in future, says CEO - April 27th, 2018
- The 4 Top Cryptocurrency Mining Stocks -- The Motley Fool - April 27th, 2018
- One in five financial institutions consider cryptocurrency ... - April 27th, 2018
- New hacks siphon private cryptocurrency keys from ... - April 27th, 2018
- What Is Cryptocurrency? - dummies - April 21st, 2018
- Cryptocurrency Market Surges to $365 Billion, Start of a ... - April 21st, 2018
- BTCMANAGER | Bitcoin, Blockchain & Cryptocurrency News - April 16th, 2018
- How to keep your cryptocurrency safe - CNET - April 11th, 2018
- How do I report Cryptocurrency Mining income? - TurboTax ... - April 4th, 2018
- When do you report Cryptocurrency investments? - TurboTax ... - April 4th, 2018
- Trading Cryptocurrency in 2018: The Definitive Guide - March 14th, 2018