Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Block Fake North Korean Lazarus DeFi Game #618

Open
1 task
summercms opened this issue Oct 25, 2024 · 0 comments
Open
1 task

Block Fake North Korean Lazarus DeFi Game #618

summercms opened this issue Oct 25, 2024 · 0 comments
Labels
Code Update 🔔 Code Update enhancement 👍 New feature or request In-progress In-progress Priority: Medium Priority: Medium

Comments

@summercms
Copy link
Contributor

Enhancement idea

  • Block Fake North Korean Lazarus DeFi Game.

Description

What never ceases to impress us is how much effort Lazarus APT puts into their social engineering campaigns. For several months, the attackers were building their social media presence, regularly making posts on X (formerly Twitter) from multiple accounts and promoting their game with content produced by generative AI and graphic designers.

One of the tactics used by the attackers was to contact influential figures in the cryptocurrency space to get them to promote their malicious website and most likely to also compromise them.

The attackers’ activity was not limited to X — they also used professionally designed websites with additional malware, premium accounts on LinkedIn, and spear phishing through email.

Screenshots

image

image

image

Links

https://securelist.com/lazarus-apt-steals-crypto-with-a-tank-game/114282/

IOC

I2P websites

n/a

IPFS websites

n/a

Tor2web websites

n/a

TOR websites

n/a

URL's

n/a

Folders

n/a

Sub-Domains

n/a

Domains

ccwaterfall.com
detankzone.com

IP's

n/a

ASN's

n/a

Emails

n/a

Wallet addresses

n/a

Mining pool addresses

n/a

@summercms summercms added Code Update 🔔 Code Update In-progress In-progress Priority: Medium Priority: Medium enhancement 👍 New feature or request labels Oct 25, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Code Update 🔔 Code Update enhancement 👍 New feature or request In-progress In-progress Priority: Medium Priority: Medium
Projects
None yet
Development

No branches or pull requests

1 participant