North Korean Hackers Spread Fake macOS Updates in Bid to Steal Wallets

North Korean hackers attempted to steal digital-asset wallets by distributing malware to Apple computer users, Weekly Chosun reported on August 1.

Citing a report by US cybersecurity firm AllSecure, the publication said the hackers lured users to rigged web pages and then made it appear that macOS required an update or had encountered an error. The scheme prompted users to manually enter malicious commands.

If successful, the attack installs malware that can steal virtual-asset wallets and information stored in web browsers. Investigators found the campaign targeted data from 157 digital-asset wallets and used a browser extension disguised as "Google Drive Offline" to directly steal victims' digital assets.