Radiant Capital Says DPRK Actor Posed as Ex-Contractor to Pull Off $50 Million Hack

Quick Summary:

The firm believes when a developer was contacted by a "trusted former contractor” in early September, it was really a DPRK actor in disguise.

It established a permanent macOS backdoor while still displaying a legitimate PDF to the user to avoid detection.

The payload was a malicious AppleScript that led the system to communicate with an innocent-sounding domain name, the team said.

---

More Pictures

---

Read Quick SummarySave Time

or

Article Details

Author / Journalist: Adrian Zmudzinski

Category: Crypto

Markets: EstoniaNorth KoreaMali

Topics: Drpk Breaking Push Radiant capital DeFi DeFi Lazarus Group

Source Website Secure: Yes (HTTPS)

News Sentiment: Neutral

Fact Checked: Legitimate

Article Type: News Report

Published On: 2024-12-09 @ 13:52:23 (2 weeks ago)

News Timezone: GMT +8:00

News Source URL: decrypt.co

Language: English

Article Length: 377 words

Reading Time: 3 minutes read

Sentences: 17 lines

Sentence Length: 23 words per sentence (average)

Platforms: Desktop Web, Mobile Web, iOS App, Android App

Copyright Owner: © Decrypt

News ID: 24278563

View Article Analysis

About Decrypt

Main Topics: Crypto

Official Website: decrypt.co

Update Frequency: 1 posts per day

Year Established: 2018

Headquarters: Estonia

News Last Updated: 10 hours ago

Coverage Areas: Estonia

Ownership: Independent Company

Publication Timezone: GMT +8:00

Content Availability: Worldwide

News Language: English

RSS Feed: Available (XML)

API Access: Available (JSON, REST)

Website Security: Secure (HTTPS)

Publisher ID: #63

Publisher Details

Frequently Asked Questions