North Korean software supply chain attack targets stock investors

guest · Jan 8, 2021

North Korean software supply chain attack targets stock investors
January 5, 2021
https://www.bleepingcomputer.com/ne...-supply-chain-attack-targets-stock-investors/

North Korean hacking group Thallium has targeted users of a private stock investment messenger service in a software supply chain attack, according to a report published this week.

Up until now, the group mainly relied on phishing attacks, such as via Microsoft Office documents, to target its victims.
Thallium is now leveraging multiple ways, such as shipping tainted Windows installers and macro-laden Office documents to prey on investors.
Click to expand...

Attackers alter the installer of a stock investment app
This week, ESTsecurity Security Response Center (ESRC) reported on North Korean hacking group altering a private stock investment messaging application to ship malicious code.

The executable contained malicious code in addition to the legitimate files from a legitimate stock investment application program.
Excel macros also used to deliver the payload
ESTsecurity researchers also observed Microsoft Office documents, such as Excel spreadsheets which contained macros were distributing the aforementioned XSL script payload.
Click to expand...

Log in or Sign up

North Korean software supply chain attack targets stock investors

guest Guest

Log in or Sign up

North Korean software supply chain attack targets stock investors

guest Guest

Useful Searches