MacOS users report attacks from Lazarus Group posing as a crypto company

• The group is believed to be sponsored by the North Korean government.  
• The group has also created a make-believe firm named JMT Trading.

MacOS users have recently reported attacks from a group of North Korean hackers. The hackers were reportedly posing themselves as a legitimate cryptocurrency company. As per a report by the International Business Times, many outlets reported an attack on their MacOS which was likely conducted by the Lazarus Group. The group is believed to be sponsored by the North Korean government.  

Jamf Patrick Wardle, an Apple Security Specialist, noted the recent malware. Wardle reported that the hackers have formed a fake cryptocurrency company presenting a legitimate, official website. Besides, the group has also created a make-believe firm named JMT Trading and released an open-source trading application to GitHub.  

On downloading the code for the application, the users encounter a malware that targets Apple’s MacOS users. The malware enables hackers to get full access to the computer’s files. According to Wardle, the malware allows hackers to take control of the user’s computer by implementing commands remotely. However, Wardle stated that the malware is “actually fairly easy to detect.” He suggested a set of security tools for MacOS users concerned they may be at risk for downloading the malware.  

This is not the first time that North Korea is linked to a series of high-profile hacks. In August, the country is alleged for approximately $2 billion in hacks related to crypto and financial exchanges.