North Korean Hackers Use ‘EtherHiding’ to Spread Malicious Crypto Wallets, Mandiant Warns

TLDR: DPRK hackers use EtherHiding to embed malicious scripts within blockchain smart contracts. Attackers distribute fake crypto wallets through compromised WordPress plug-ins. EtherHiding allows payloads to persist even after site cleanup, complicating detection. Mandiant links the campaign to DPRK’s financially motivated cyber operations. A new cyber threat has emerged targeting cryptocurrency users through compromised WordPress [...]

The post North Korean Hackers Use ‘EtherHiding’ to Spread Malicious Crypto Wallets, Mandiant Warns appeared first on Blockonomi.