Attack targeting Apple’s MacOS users · August
Annex 76: List of DPRK cyberthreat actors' malicious activities in 2022 monitored by the Panel (table row 24 of 37). RGB Unit: Lazarus Group; Case Name: Attack targeting Apple’s MacOS users; SPH √; VAS: (blank); Publicized Month: August. (Note: RGB Reconnaissance General Bureau, SPH Significant Phishing, KAC knowledge acquisition and espionage, VAS virtual asset seizures.)
MacOS spear-phishing with fake Coinbase job advertisements targeting fintech developers
Para 166: “The Lazarus Group was also reported to have carried out a spear-phishing campaign in order to infect devices running Apple MacOS, targeting developers in the finance technology sector by distributing malware-laced PDFs disguised as job advertisements for Coinbase, a cryptocurrency exchange. ... By targeting cryptocurrency developers, this campaign likely has been used to generate illicit revenue for the Democratic People’s Republic of Korea.” Footnote 153: linked to “Operation In(ter)ception”.