North Korea Launches Cyberattack On The DeFi Protocol
North Korea – An alleged cyberattack against deBridge, a cross-chain interoperability and liquidity transfer protocol, was purportedly carried out by the Lazarus Group, a hacker group associated with the North Korean government.
The crew was tricked into opening a PDF file called “New Salary Adjustment” by malicious actors who made it appear as though it was received from a co-founder of the project’s email account.
The suspicious file was ultimately downloaded and opened by one of the employees.
The deBridge team ended up investigating the suspicious email. It found out that opening the PDF file would require entering a password. The downloaded archive also contained an LNK file, which is masked as a password file. Once opened, it executes a cmd.exe command that infects the entire system.
North Korea is likely behind the attempted attack
Files with the same names were attributed to Lazarus Group in the past, which is why the deBridge team believes that North Korea is likely behind the attempted attack.
The $100 million Harmony hack, which took place in November, were also attributed to Lazarus Group. North Korean hackers were also behind the $625 million Ronin hack.
DISCLAIMER: The Information on this website is provided as general market commentary and does not constitute investment advice. We encourage you to do your own research before investing.
Join CoinCu Telegram to keep track of news: https://t.me/coincunews
Follow CoinCu Youtube Channel | Follow CoinCu Facebook page
Annie
CoinCu News
Author
News
North Korea Launches Cyberattack On The DeFi Protocol
North Korea – An alleged cyberattack against deBridge, a cross-chain interoperability and liquidity transfer protocol, was purportedly carried out by the Lazarus Group, a hacker group associated with the North Korean government.
The crew was tricked into opening a PDF file called “New Salary Adjustment” by malicious actors who made it appear as though it was received from a co-founder of the project’s email account.
The suspicious file was ultimately downloaded and opened by one of the employees.
The deBridge team ended up investigating the suspicious email. It found out that opening the PDF file would require entering a password. The downloaded archive also contained an LNK file, which is masked as a password file. Once opened, it executes a cmd.exe command that infects the entire system.
North Korea is likely behind the attempted attack
Files with the same names were attributed to Lazarus Group in the past, which is why the deBridge team believes that North Korea is likely behind the attempted attack.
The $100 million Harmony hack, which took place in November, were also attributed to Lazarus Group. North Korean hackers were also behind the $625 million Ronin hack.
DISCLAIMER: The Information on this website is provided as general market commentary and does not constitute investment advice. We encourage you to do your own research before investing.
Join CoinCu Telegram to keep track of news: https://t.me/coincunews
Follow CoinCu Youtube Channel | Follow CoinCu Facebook page
Annie
CoinCu News
Other Posts
Related Posts
News
Hong Kong Crypto ETFs Of HashKey And Bosera Completed Subscription To Launch On April 30
News
The Bitcoin Epic Satoshi Of The 4th Halving Was Auctioned For Over $2.1 Million
News
