NK Hackers Use Fake macOS Updates to Target Crypto Wallets

North Korean hackers have been using fake macOS updates to target cryptocurrency wallets, according to US cybersecurity firm AllSecure. The attackers tricked users into manually entering malicious commands by making it appear that their operating system required an update or had encountered an error.

The malware can then steal cryptocurrency wallets and information stored in web browsers, targeting data from 157 types of digital-asset wallets. Researchers found that the hackers used a browser extension disguised as Google Drive Offline to directly siphon victims' digital assets.