Cybersecurity firm JUMPSEC said the North Korea-linked hacking group BlueNoroff has been using fake Zoom and Microsoft Teams meetings to scan cryptocurrency wallets and spread malware through compromised Telegram accounts. According to JUMPSEC, the phishing kit works on both Windows and macOS and is capable of stealing browser keys. The attackers also used AI-generated profile images to fake meeting videos, then scanned wallet extensions to identify high-value targets before delivering malware. JUMPSEC added that security researchers were able to recover the source code after the attackers exposed a JavaScript map. The disclosure was cited by crypto.news and later carried by Techub.
Cybersecurity firm JUMPSEC said the North Korea-linked hacking group BlueNoroff has been using fake Zoom and Microsoft Teams meetings to scan cryptocurrency wallets and distribute malware through compromised Telegram accounts.
JUMPSEC said the phishing kit supports both Windows and macOS and can steal browser keys. The attackers also used AI-generated profile images to fake meeting videos, then scanned wallet extensions to identify high-value targets before pushing malware.
JUMPSEC added that security researchers recovered the source code after the attackers exposed a JavaScript map. The disclosure was cited by crypto.news.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
