ClickFix, EtherHiding & a DPRK Wallet Trail

www.allsecure.io

cross-posted to:
blueteamsec

ClickFix, EtherHiding & a DPRK Wallet Trail

www.allsecure.io

digicatM to

blueteamsecEnglish · 1 month ago

cross-posted to:
blueteamsec

A routine web search led to a macOS malvertising campaign chaining ClickFix social engineering, blockchain-hosted C2 via EtherHiding, a 157-wallet infostealer, and a malicious Chrome extension, traced on-chain to a DPRK-linked laundering network.

You must log in or # to comment.

Chat

blueteamsec

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !blueteamsec@infosec.pub

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

42 users / day
101 users / week
338 users / month
1.04K users / 6 months
252 local subscribers
792 subscribers
4.67K Posts
352 Comments
Modlog

mods:
digicat