BlueNoroff, a suspected subgroup of Lazarus Group, is now targeting Apple's macOS with new malware RustBucket, highlighting hackers' expanding toolset
A financially-motivated North Korean threat actor is suspected to be behind a new Apple macOS malware strain called RustBucket.
“[RustBucket] communicates with command and control (C2) servers to download and execute various payloads,” Jamf Threat Labs researchers Ferdous Saljooki and Jaron Bradley said in a technical report published last week.
The Apple device management company attributed it to a threat actor known as BlueNoroff, a subgroup within the infamous Lazarus cluster that’s also tracked under the monikers APT28, Nickel Gladstone, Sapphire Sleet, Stardust Chollima, and TA444.
The connections stem from tactical and infrastructure overlaps with a prior campaign exposed by Russian cybersecurity company Kaspersky in late December 2022 likely aimed at Japanese financial entities using fake domains impersonating venture capital firms.
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !privacy@community.nicfab.it
Welcome!
Welcome to the NicFab Community Lemmy instance!
Please be kind.
All communities in this space should be at least related to Privacy and innovation.
This is a community space for projects and users interested in privacy, data protection, cybersecurity, and innovative solutions.
Matrix Space
You can also reach this Privacy Community on Matrix by clicking here.
Benvenuto nella instanza Lemmy NicFab Community!
Vi invitiamo ad essere gentili.
Tutte le comunità in questo spazio dovrebbero essere almeno legate alla privacy e all’innovazione.
Questo è uno spazio comune per progetti e utenti interessati alla privacy, alla protezione dei dati, alla cybersecurity e alle soluzioni innovative.
Matrix Space
Puoi trovare questa community anche su Matrix clicando qui.
