North Korean Hackers Use Fake macOS Updates to Target Crypto Wallets

North Korean hackers attempted to steal digital-asset wallets by distributing malware to Apple computer users.

Weekly Chosun reported on August 1 that US cybersecurity firm AllSecure said North Korean hackers lured users to booby-trapped web pages, then tricked them into manually entering malicious commands by making it appear that macOS required an update or had encountered an error.

If the attack succeeds, the malware can steal cryptocurrency wallets and information stored in web browsers. Researchers found it targeted data from 157 types of digital-asset wallets and used a browser extension disguised as Google Drive Offline to directly siphon victims' digital assets.