Attackers Create Elaborate Crypto Trading Scheme to Install Malware

guest · Oct 15, 2019

Attackers Create Elaborate Crypto Trading Scheme to Install Malware
October 12, 2019
https://www.bleepingcomputer.com/ne...ate-crypto-trading-scheme-to-install-malware/

Security researcher MalwareHunterTeam discovered a scheme where an attacker has created a fake company that is offering a free cryptocurrency trading platform called JMT Trader. When this program is installed, it will also infect a victim with a backdoor Trojan.

It is not known if the malware drops any other payloads or is simply used as a backdoor to steal cryptocurrency wallets or exchange logins.
Mac security researcher Patrick Wardle has also analyzed the Mac variant of the JMT Trader malware. While many of the details are the same for both the Windows and Mac versions, Mac users should read Wardle's article for more information that is specific to installs on macOS.
Possible ties to the Lazarus APT group
When analyzing the scheme, MalwareHunterTeam noted that it had a strong resemblance to a previous crypto trading application malware operation named AppleJeuce.
While it is not 100% confirmed that JMT Trader is a Lazarus operation, Kaspersky GReAT Senior Security Researcher Seongsu Park feels that they may be related.
Click to expand...

Objective-See: Pass the AppleJeus - a mac backdoor written by the infamous lazarus apt group

Log in or Sign up

Attackers Create Elaborate Crypto Trading Scheme to Install Malware

guest Guest

Log in or Sign up

Attackers Create Elaborate Crypto Trading Scheme to Install Malware

guest Guest

Useful Searches