Summary:
- Security researchers have discovered a new malware variant associated with the BlueNoroff APT group, known for targeting cryptocurrency exchanges.
- The malware, named "ObjCShellz," functions as a remote shell and allows the attacker to have remote control over compromised systems.
- BlueNoroff disguises itself as an investor or headhunter to gain access to its targets.
- The malware communicates with a command-and-control server using a specific URL.
- The malware's functionality suggests it is a late stage of a multi-stage malware delivered via social engineering.
Hashtags:
#BlueNoroff #malware #cryptocurrency #cybersecurity #APT
https://www.infosecurity-magazine.com/news/bluenoroff-malware-targets/