Targeting of Mac users at financial institutions · Apr 2023
BlueNoroff, a subgroup of North Korea’s Lazarus Group, was observed using a new Mac operating-system malware family, dubbed RustBucket, in recent attacks on Mac machines. Based on the lures used, BlueNoroff likely targeted the financial technology sector with the malware. RustBucket can be used to gather system information and allows the attacker to perform various actions on infected machines.
24th April – Threat Intelligence Report · 2023-04-24
Researchers have discovered a macOS malware named RustBucket that communicates with C2 servers and is suspected to be associated with a North Korean state-sponsored threat actor known as BlueNoroff, a sub-group of Lazarus Group.
'RustBucket' malware targets macOS · April 21 2023 (dateCreated 2023-04-21)
We track and protect against this malware family under the name 'RustBucket' and suspect it to be attributed to a North Korean, state-sponsored threat actor. The APT group called BlueNoroff is thought to act as a sub-group to the well-known Lazarus Group and is believed to be behind this attack.
Multiple organizations · 21/04/2023
Researchers from Jamf observe the North Korea-linked BlueNoroff threat group using a new macOS malware family dubbed RustBucket. [Date Occurred: 'Recently'; Date Discovered: 'Recently']