North Korean hacking group, Lazarus Group, is using malware to steal cryptocurrency, according to SecurityScorecard’s STRIKE Team. The malware, named Marstech1, is planted in “undetectable” GitHub repositories and NPM packages, posing a major global software supply chain threat. It specifically targets cryptocurrency wallets such as MetaMask, Exodus and Atomic. SecurityScorecard has confirmed 233 victims so far across the US, Europe and Asia.
Winnti Hackers Attacking Japanese Organizations With New Malware
The China-based Winnti Group has targeted Japanese firms in key sectors such as manufacturing, materials, and energy, using a cyberattack campaign known as “RevivalStone.” Employing