KOREA

The North Korean hacker group Lazarus has implanted malware for stealing cryptocurrency in a new batch of JavaScript packages

ChainCatcher news, according to Decrypt, the Socket research team has discovered in a new attack that the North Korean hacker group Lazarus is associated with six new malicious npm packages that attempt to deploy backdoors to steal user credentials.Additionally, this malware can extract cryptocurrency data and steal sensitive information from Solana and Exodus crypto wallets. The attacks primarily target files from Google Chrome, Brave, and Firefox browsers, as well as keychain data on macOS, specifically tricking developers into inadvertently installing these malicious packages.The six discovered malicious packages include: is-buffer-validator, yoojae-validator, event-handle-package, array-empty-validator, react-event-dependency, and auth-validator. They lure developers into installation through "typosquatting" (exploiting misspelled names). The APT group has created and maintained GitHub repositories for five of these packages, disguising them as legitimate open-source projects, increasing the risk of developers using the malicious code. These packages have been downloaded over 330 times. Currently, the Socket team has requested the removal of these packages and reported the related GitHub repositories and user accounts.Lazarus is a notorious North Korean hacker group, linked to the recent $1.4 billion Bybit hack, the $41 million Stake hack, the $27 million CoinEx hack, and countless other attacks in the crypto industry.

South Korea plans to issue new guidelines in the third quarter to lift the ban on institutional investment in cryptocurrencies

According to ChainCatcher, The Block reported that South Korea's financial regulatory agency announced on Wednesday plans to release comprehensive guidelines for institutional cryptocurrency investment in the third quarter. The Financial Services Commission made this announcement during a meeting with local cryptocurrency industry experts. While the investment guidelines for listed companies and professional investors are expected to be issued in the third quarter, the Financial Services Commission stated that its goal is to launch investment guidelines for non-profit organizations and cryptocurrency exchanges in April.The Financial Services Commission first announced in January that it would gradually lift the de facto ban on institutional investors investing in cryptocurrencies. Last month, the regulator revealed that it intends to first allow charities and universities to sell their cryptocurrency assets in the second quarter. The upcoming detailed guidelines further solidify South Korea's shift in stance towards cryptocurrencies, no longer strictly opposing the entry of crypto assets into traditional financial markets.Meanwhile, the Financial Services Commission has also begun developing a second set of rules for a two-part cryptocurrency regulatory framework, with the first set of rules launched last year. The second part of the cryptocurrency law will focus on stablecoins and regulating cryptocurrency business owners.
ChainCatcher Building the Web3 world with innovators