North Korean hackers are one step away from mass cryptocurrency thefts | Bitcoin.pl

North Korean hackers are attacking again: now they have broken into Axios, a popular JavaScript library that allows you to run many popular applications and websites. The goal was to capture login details. In this way, cybercriminals are preparing for mass thefts of cryptocurrencies.

Hackers want your cryptocurrencies

Hackers linked to North Korea have been stealing cryptocurrencies for years. Now their target turned out to be Axios.

Every time you load a website, check your bank account balance, or open an app on your phone, there’s a good chance that Axios is running somewhere in the background, making it possible

– Tom Hegel from SentinelOne explained to Reuters,

Cybercriminals, if their goal was fully achieved, could gain access to credentials that could help them in subsequent attacks. Experts warn that they were preparing for massive cryptocurrency thefts.

The HackerNews@TheHackersNews

⚡ WARNING – Axios npm (83M weekly downloads) was compromised, turning installs into a malware delivery path. Versions 1.14.1 and 0.30.4 pulled a fake dependency that dropped a cross-platform RAT, then erased evidence. Published using stolen maintainer credentials. 🔗What

Media from The Hacker News post

Read 12 answers

Nuke drop

Axios fell victim to them for a reason: it is almost universally used. Moreover, the case raises the issue of cryptocurrencies, which are needed by the Kim regime to finance their work on a nuclear bomb.

Companies in almost every industry sector, from healthcare to finance, use Axios to simplify the creation and management of their websites. Some cryptocurrency companies use this software, as do technology companies operating in the cryptocurrency industry

North Korea is suffering from the sanctions imposed on it by the US. For this reason, he needs cryptocurrencies to finance his work on the “nuclear”, which he cannot do legally. According to UN reports, they have already managed to steal billions of USD in digital assets in recent years.

The scale of the project is demonstrated by the fact that one of the White House employees interviewed by CNN said that in 2023, almost half of North Korea’s nuclear weapons research was financed thanks to hacker attacks. The state simply behaves like a criminal group: it obtains capital through criminal activities.

North Korea is not worried about its reputation or being ultimately identified, so while these types of operations are very high profile, it is a price they are willing to pay

said Ben Read, director of strategic threat intelligence at security firm Wiz.

Do you currently have cryptocurrencies?

It’s about cryptocurrencies on an exchange, in an application or in a wallet. Don’t treat cryptocurrency ETFs, ETNs and ETPs as ownership.

The survey is anonymous and voluntary. We do not collect your name or IP address. We only publish data in aggregate. Privacy Policy