Underscoring the need for greater security in the emerging crypto world. North Korea-linked threat actor APT37 is linked to a new malware dubbed M2RAT in attacks targeting its southern counterpart
Underscoring the need for greater security in the emerging crypto world is critical given the recent surge in cyber-attacks targeting cryptocurrency exchanges and users. North Korea-linked threat actor APT37 has been linked to a new malware dubbed M2RAT, which has been used in multiple cyber-attacks against its southern counterpart.
M2RAT works by targeting vulnerable computers with malicious payloads and then installing a backdoor that can be used to exfiltrate data or access the system remotely. The payload is hidden in a malicious PDF file, which is then sent to unsuspecting users, who then open the file and install the backdoor on their system.
Once the backdoor is installed, the cybercriminals can then steal valuable data and use it to their advantage. M2RAT can also be used to gain access to administration rights on the infected system, giving the attackers full control over the system.
The emergence of this malware highlights the need for enhanced security measures within the cryptocurrency space. Users need to be aware of the threats posed by North Korea-linked actors, and ensure that their systems are secure by using robust security measures such as two-factor authentication, strong passwords, and an up-to-date anti-virus program. Additionally, regular backups of data should be created to mitigate the risk of data theft in the event of a successful attack.