North Korea Hacks Crypto Exchange With First-Ever macOS Malware

For the longest time, the macOS system has always been deemed to be more secure than Windows’ as it is less susceptible to malware programs. However, this long-standing superiority that macOS has over Windows faced a notable challenge today, when hackers from North Korea were able to hack into a cryptocurrency exchange with a malware that was developed to target both Windows and macOS systems.

According to a report by Russian internet security company Kaspersky Lab, the “AppleJeus” malware successfully penetrated the great macOS firewall and made its way into the systems of a cryptocurrency exchange when one of its employees downloaded an affected app. To protect the interests of the exchange, Kaspersky did not reveal its name. However, they explained that the “Trojan horse” application originated from a fraudulent developer armed with fake security certificates, and is suspected to be a part of the infamous North Korea hacker collective Lazarus Group.

Kaspersky claims that the malware was deployed in an attempt to rob the cryptocurrency exchange of its funds, which is not very surprising considering the latest tirade of hacks – both successful and botched ones – targeted at some of the biggest crypto exchanges in the world.

In the report, they also mentioned that the reason behind the hackers creating a malware that targets macOS was to “ensure that the OS platform was not an obstacle to infecting targets. It seems the attackers went the extra mile and developed malware for other platforms, including for macOS.”

To make matters worse, the hackers have no intention of stopping at all. Now that they’ve finally managed to conquer the macOS system, they are shifting their crosshairs to their next target – Linux. According to Kaspersky, “a version for Linux is apparently coming soon, according to the website. It’s probably the first time we see this APT group using malware for macOS.”

In an email interview with Bleeping Computer, the head of the Global Research & Analysis (GReAT) Asia Pacific (APAC) team at Kaspersky Lab, Vitaly Kamluk said:

“The fact that they developed malware to infect macOS users in addition to Windows users and – most likely – even created an entirely fake software company and software product in order to be able to deliver this malware undetected by security solutions, means that they see potentially big profits in the whole operation.”