North Korean-Linked macOS Malware Targets Cryptocurrency Sector with RustDoor and Koi Stealer

SUMMARY :

A recent campaign attributed to North Korean threat actors has been identified, targeting macOS users in the cryptocurrency industry. The attackers employ sophisticated social engineering techniques, posing as recruiters to lure job-seeking software developers into downloading malicious software. The malware suite includes "RustDoor," a Rust-based backdoor masquerading as legitimate software updates, and a previously undocumented macOS variant of "Koi Stealer," designed to exfiltrate sensitive information

OPENCTI LABELS :

apt,macos,rust,koi stealer,studio helper,rustdoor c2,cryptocurrencies


Open in NetmanageIT OpenCTI Public Instance with below link!


Use public read only username and password on login page.

NOTE : Use Public READ only user credentials on login page banner.


North Korean-Linked macOS Malware Targets Cryptocurrency Sector with RustDoor and Koi Stealer