BlueNoroff hackers steal crypto using fake MetaMask extension

Date (as written): 01.11.2021
Year: 2021
Country: United States;Russia;China;India;United Kingdom;Ukraine;Poland;Czech Republic;United Arab Emirates;Germany
Actors (as written): Blue Noroff/APT38/Stardust Chollima/G0082/Sapphire Sleet fka COPERNICUM/Genie Spider < Lazarus Group/Labyrinth Chollima/HIDDEN COBRA/Guardians of Peace/Diamond Sleet fka ZINC/NICKEL ACADEMY/NewRomanic Cyber Army Team/Whois Hacking Team/Appleworm/Group 77/G0032 (Reconnaissance General Bureau, Bureau 121, Unit 180, Lab 110)
Actor pages: Blue Noroff APT38 Stardust Chollima G0082 Sapphire Sleet fka COPERNICUM Genie Spider < Lazarus Group Labyrinth Chollima HIDDEN COBRA Guardians of Peace Diamond Sleet fka ZINC NICKEL ACADEMY NewRomanic Cyber Army Team Whois Hacking Team Appleworm Group 77 G0032
Tags (as written): Hijacking with Misuse

Source entries (1)

EuRepoC

BlueNoroff hackers steal crypto using fake MetaMask extension · 01.11.2021

The North Korean threat actor group known as 'BlueNoroff' has been spotted targeting cryptocurrency startups with malicious documents and fake MetaMask browser extensions

https://www.bleepingcomputer.com/news/security/bluenoroff-hackers-steal-crypto-using-fake-metamask-extension/

https://securelist.com/the-bluenoroff-cryptocurrency-hunt-is-still-on/105488/

https://securityaffairs.com/148042/malware/rustbucket-macos-malware.html

https://www.bleepingcomputer.com/news/security/bluenoroff-hackers-backdoor-macs-with-new-objcshellz-malware/

Suggest a correction on GitHub