The North Korean hacker group Bluenoroff is suspected of using the macOS malware "RustBucket" to steal information
ChainCatcher news, according to Sekoia.io, has discovered a malware for macOS written in Rust and Objective-C called "RustBucket." It consists of a macOS installer that installs a fully functional PDF reader with a backdoor. This fake PDF reader requires opening a specific PDF file as a key to trigger malicious activities, after which it collects and sends information about the compromised system.
It is reported that this malware is suspected to be linked to the hacker group Bluenoroff, which has ties to North Korea. Since 2017, Bluenoroff has been conducting financial activities targeting cryptocurrency exchanges and venture capital-related entities in Europe and Asia. (source link)
Related tags
ChainCatcher reminds readers to view blockchain rationally, enhance risk awareness, and be cautious of various virtual token issuances and speculations. All content on this site is solely market information or related party opinions, and does not constitute any form of investment advice. If you find sensitive information in the content, please click "Report", and we will handle it promptly.
Related tags