BlueNoroff seen targeting crypto businesses with new piece of malware The malware establishes persistence and opens up a back door It can download additional payloads, run Shell commands, and more Devious North Korean state-sponsored threat actors known as BlueNoroff have been spotted deploying a brand new piece of malware to attack their victims.

Security researchers have discovered new macOS malware that appears to come from a notorious North Korean hacking group out to target cryptocurrency-related businesses. "Hidden Risk" malware arrives through phishing emails packed with fake news headlines and doctored articles about cryptocurrency-related topics,

North Korean threat actor BlueNoroff has been targeting crypto-related businesses with a new multi-stage malware for macOS systems.

Security researchers suspect North Korean attackers behind a macOS malware campaign targeting crypto companies.

The malware then downloads and executes a malicious x86-64 binary ... the application was built on a macOS 14.2 Sonoma machine but will run on both Intel and Apple silicon Macs with macOS 12 Monterey or later.

Malware developers are apparently developing functional ransomware that targets macOS.