World Crypto Global

World Crypto Global

Crypto News

Top News By Agency By Country By Publication Time The Most Read Stories Most Viewed Agencies All News Lazarus Group Hack Crypto Developers, Creating Backdoors in NPM Repositories © Copyright Image: ZyCrypto

Lazarus Group, hackers from North Korea, created a new campaign, targeting crypto developers through NPM repositories. They introduced 6 repositories, that would appeal to crypto developers, and added malware, to create backdoors, infiltrate projects, and steal credentials. 

The hacking group would use BeaverTail, a malware package, to execute a hidden file on the target system. The malware would then steal credentials by accessing browser files and searching for files related to cryptocurrency wallets like Exodus. The stolen data would then be sent to a command and control centre so that the hackers could readily access the sensitive files.

Attributing this attack, wrote Kirill Boychenko, Socket Seniority Analyst, definitively to Lazarus or a sophisticated copycat remains challenging, as absolute attribution is inherently difficult. However, the tactics, techniques, and procedures (TTPs) observed in this npm attack closely align with Lazaruss known operations, extensively documented by researchers from Unit42, eSentire, DataDog, Phylum, and others since 2022.

The NPM repositories were based on actual libraries, but used typosquatting and similar spelling to mimic popular packages and trick developers into installing them. The malicious packages were downloaded over 300 times, showing the reach of the attack. 

The six malicious packages include: 

  1. is-buffer-validator mimics is-buffer library, steals credentials. 
  2. yoojae-validator fake validator, steals sensitive data. 
  3. event-handle-package pretends to be an event handling tool, but installs a back door for remote access. 
  4. array-empty-validator collects browser and system credentials. 
  5. react-event-dependency pretends to be a react utility, but compromises developer environments. 
  6. auth-validator steals login and API credentials. 

The APT group, wrote Boychenko, created and maintained GitHub repositories for five of the malicious packages, lending an appearance of open source legitimacy and increasing the likelihood of the harmful code being integrated into developer workflows.

The malware was designed to collect system information, such as operating system, system directories, and hostname, deploying this attack to hundreds of NPM users. 

It systematically iterates through browser profiles, wrote Boychenko, to locate and extract sensitive files such as Login Data from Chrome, Brave, and Firefox, as well as keychain archives on macOS. Notably, the malware also targets cryptocurrency wallets, specifically extracting id.json from Solana and exodus.wallet from Exodus.

This attack is part of Lazarus Groups broader strategy to disrupt supply chains. The NPM malware allows them to target developers, a vital part of the global supply chain, and embed themselves inside systems, development environments, and crypto addresses to further their attacks. Similar methods have been used to target GitHub and Pythons pip packages. 

Continuous monitoring of unusual dependency changes, wrote Boychenko, can expose malicious updates while blocking outbound connections to known C2 endpoints prevents data exfiltration. Sandboxing untrusted code in controlled environments and deploying endpoint protection can detect suspicious file system or network activities. 

Boychenko raises a critical point because developers, due to tight deadlines, often use many libraries without fully checking them. Cryptocurrency, being decentralized, allows developers to collaborate over vast distances, but also increases the attack vector of open source projects.

According to the United Nations 2024 report, North Korean hackers were responsible for 35% of cryptocurrency thefts, amounting to $1 billion in lost crypto. The hackers pose a new kind of security threat, being state actors, because they may use their accumulated wealth to fund nuclear weapons programs and ballistic missile enhancements.

Read more: https://zycrypto.com/lazarus-group-hack-crypto-developers-creating-backdoors-in-npm-repositories/

Text source: ZyCrypto

Cryptocurrency News Cryptocurrency News North Korea Written by Troy Watson On Fri, 14 Mar 2025 Disclaimer: Financial information and news are not financial advice, read the disclaimer. Buy & sell Crypto in minutes

Join BINANCE!

The world's largest crypto exchange

The 7 Most Read Stories Best NFT Airdrops and Giveaways for October 2022  These Are The Bitcoin Predictions For 2023 By Arcane... Lightning Labs Announces Cheaper Way To Send Money W... Potential Loss of $50K in Plea Deal for Suspected Ha... Tom Brady, Gisele Bundchen And Sam Bankman-Fried Sue... Best Bitcoin Wallets The new $10 billion protocol: Bitcoin builder explai... View All Most Viewed Agencies InsideBitcoins.com BitcoinChaser Blockonomi

The most complete Crypto News Center.

Search Stories:

Latest top stories

Opportunity in Trump Policies: Bitcoin Mining Supplier Auradines Path to Success

Bitcoin:  News:  Auradines:  Mining:  Opportunity:  Path:  policies:  Success:  Supplier:  Trump: 

By Crypto Breaking... On Wed, 26 Mar 2025 Auradine Launches First U.S-Designed Hydro-Cooled Bitcoin Miner

News:  Bitcoin (BTC): 

By TronWeekly On Wed, 26 Mar 2025 Brazilian Data Watchdog Affirms Decision to Prohibit Global Cryptocurrency Transactions

News:  Affirms:  Brazilian:  cryptocurrency:  Data:  Decision:  Global:  Prohibit:  transactions:  watchdog: 

By Crypto Breaking... On Wed, 26 Mar 2025 Top 10 Ethereum-Based Projects Drawing Most Developer Attention in the Last Month

Ethereum: 

By Coindoo On Wed, 26 Mar 2025 Bitcoin and Ethereum poised to close out Q1 with losses, chances of vertical swing up slim

Bitcoin:  Ethereum:  News:  Chances:  Close:  Losses:  Poised:  slim:  swing:  Vertical: 

By Crypto Breaking... On Wed, 26 Mar 2025 Crypto YouTuber Ben Bitboy Armstrong Arrested in Florida: What Happened?

News:  Armstrong:  arrested:  BEN:  Bitboy:  crypto:  florida:  Happened:  YouTuber: 

By Crypto Breaking... On Wed, 26 Mar 2025 Napster, the Revolutionary Music Pioneer, Sells for $207M Unveiling Plans for Music Metaverse

News:  207M:  Metaverse:  Music:  Napster:  Pioneer:  Plans:  Revolutionary:  sells:  unveiling: 

By Crypto Breaking... On Wed, 26 Mar 2025 Exciting Launch of Tokenized Real Estate Trading Platform on Polygon

News:  estate:  Exciting:  launch:  platform:  Polygon:  real:  Tokenized:  trading: 

By Crypto Breaking... On Wed, 26 Mar 2025 Is Ethereums Price Set to Hit $1.2K? PoS Transition Leads to Record-Low Fees

Ethereum:  News:  1.2K:  Ethereums:  Fees:  Hit:  Leads:  PoS:  Price:  RecordLow:  Set:  transition: 

By Crypto Breaking... On Wed, 26 Mar 2025 eToros Exciting Announcement: US IPO Filing for Trading Platform

Bitcoin:  Ethereum:  News:  Announcement:  eToros:  Exciting:  filing:  IPO:  platform:  trading: 

By Crypto Breaking... On Wed, 26 Mar 2025 Billionaire Highlights Stablecoins Role in Boosting US Dollar Dominance

Economy: 

By Coindoo On Wed, 26 Mar 2025 Can Ripple (XRP) Turn $1,000 Into $1 Million If It Matches Bitcoins (BTC) Market Cap?

More News: 

By Crypto Daily On Tue, 25 Mar 2025 Investor Who Spotted Solana, Ethereum, and XRP Under $1 Shines Spotlight on an AI-Powered RWA Altcoin at Just $0.20

More News: 

By Crypto Daily On Tue, 25 Mar 2025 BlackRock expands $1.7B tokenized treasury fund to Solana

Ecosystem: 

By Crypto Briefing On Tue, 25 Mar 2025 Trader Warns That Dogecoin (DOGE) Could Bleed Out Some More, But Cardano (ADA) and This $0.20 Token Are Set to Fly

More News: 

By Crypto Daily On Tue, 25 Mar 2025 Best Crypto to Buy Now After MicroStrategy's $580M Bitcoin Purchase

More News: 

By Crypto Daily On Tue, 25 Mar 2025 Here Are Shiba Inu Price Predictions for 2025, 2028, 2030, 2035, and 2040

Market:  Latest Shiba Inu (SHIB) News Today:  SHIB:  Shiba Inu Price Prediction: 

By The Crypto Basic On Tue, 25 Mar 2025 Unveiling the StilachiRAT Malwares Tactics for Attacking Crypto Wallets on Chrome

News:  Attacking:  chrome:  crypto:  Malwares:  StilachiRAT:  Tactics:  unveiling:  Wallets: 

By Crypto Breaking... On Tue, 25 Mar 2025 BlackRock Brings Bitcoin ETP to Europe Following US Success

Market:  Trending Now:  Latest Bitcoin (BTC) News Today:  Latest BlackRock News Updates Today: 

By The Crypto Basic On Tue, 25 Mar 2025 Dogecoin Foundation Establishes 10M DOGE Reserve to Advance Payments Push

Market:  Latest Dogecoin (DOGE) News Today: 

By The Crypto Basic On Tue, 25 Mar 2025 Pump.funs new DEX reaches $1B volume a week after launch

More Crypto News: 

By Cointelegraph.c... On Tue, 25 Mar 2025 DYDX surges 10% with buybacks accounting for a quarter of protocol revenue

News:  accounting:  Buybacks:  dYdX:  protocol:  Quarter:  revenue:  Surges: 

By Crypto Breaking... On Tue, 25 Mar 2025 Kraken Seeks Up to $1 Billion in Debt Financing Ahead of IPO

Others: 

By Coindoo On Tue, 25 Mar 2025 Senator Warren challenges SEC nominee Paul Atkins over FTX ties and deregulation risks

Featured:  Politics:  Regulation: 

By CryptoSlate On Tue, 25 Mar 2025 PEPE Gears Up for a Breakout: Consolidation Phase Sets the Stage for a Major Move

News: 

By TronWeekly On Tue, 25 Mar 2025 SEC Nominee Atkins Reveals Assets Worth Over $327 Million Prior to Confirmation Hearing

News:  Assets:  Atkins:  Confirmation:  hearing:  Million:  nominee:  Prior:  Reveals:  SEC:  Worth: 

By Crypto Breaking... On Tue, 25 Mar 2025 Binance Coin (BNB), Sui (SUI), and Dogecoin (DOGE): Breakout Analysis Unveiled

Breaking News: 

By Crypto Daily On Tue, 25 Mar 2025 SEC ends probe into Immutable, signaling regulatory shift in blockchain gaming

Crypto:  DeFi:  Featured:  Gaming:  Regulation: 

By CryptoSlate On Tue, 25 Mar 2025 BlackRock launches Bitcoin ETP in Europe

More Crypto News: 

By Cointelegraph.c... On Tue, 25 Mar 2025 XRP Breakout On Hold? Financial Expert Reveals Whats Missing

Altcoin:  altcoins:  bitcoin:  crypto:  digital currency:  xrp:  XRPUSD: 

By NewsBTC On Tue, 25 Mar 2025 BlackRocks BUIDL Expands to Solana as Market Cap Nears $2B

News:  blackrock:  Blockchain:  BUIDL:  solana: 

By TronWeekly On Tue, 25 Mar 2025 Popcat (POPCAT) Price Prediction: Viral Token Jumps 40% Overnight

More News: 

By Crypto Daily On Tue, 25 Mar 2025 Discover the Evidence: Altcoin Season is Here

Bitcoin:  News:  Altcoin:  Discover:  evidence:  Season: 

By Crypto Breaking... On Tue, 25 Mar 2025 Whale.io to Bridge NFT Collection from TON Blockchain to Solana

More News: 

By Crypto Daily On Tue, 25 Mar 2025 Next Crypto to Explode? Analysts Point to Newcomers with AI Utility

More News: 

By Crypto Daily On Tue, 25 Mar 2025 Best Crypto Presale 2025: New Meme Coins See Record-Breaking Interest

More News: 

By Crypto Daily On Tue, 25 Mar 2025 XRP ETF Approval Odds Soar To New Highs Suggesting Imminent Price Explosions For Payment Tokens

More News: 

By Crypto Daily On Tue, 25 Mar 2025 Best Crypto to Buy Now as Whale Accumulation Spikes Across Sectors

More News: 

By Crypto Daily On Tue, 25 Mar 2025 Next Crypto to Hit $1? These Underdogs Could Be Next in Line

More News: 

By Crypto Daily On Tue, 25 Mar 2025 Best Crypto To Buy Before April? This Altcoin Tops Toncoin, Chainlink, BNB, and Tron on Investor Watchlists

More News: 

By Crypto Daily On Tue, 25 Mar 2025 CME Group launches tokenization pilot powered by Google Clouds blockchain infrastructure

Crypto:  Exchanges:  Featured:  Technology:  Tokens: 

By CryptoSlate On Tue, 25 Mar 2025 Polymarket Expands with Solana Integration, Enabling SOL Deposits

Others: 

By Coindoo On Tue, 25 Mar 2025 Best Cheap Crypto to Buy Now Before Exchange Listings Shake Up Prices

More News: 

By Crypto Daily On Tue, 25 Mar 2025 Best Meme Coin to Buy Now as Community Tokens Gain Steam

More News: 

By Crypto Daily On Tue, 25 Mar 2025 Bitcoin Miners See Stable Income After Halving: Coin Metrics Report

Bitcoin:  News:  COIN:  Halving:  income:  metrics:  Miners:  report:  stable: 

By Crypto Breaking... On Tue, 25 Mar 2025 Crypto Price Predictions If Bitcoin Hits $250K: XRP, Solana, and Remittix

More News: 

By Crypto Daily On Tue, 25 Mar 2025 Algorand Price Prediction: ALGO Gears Up for Ecosystem Expansion

More News: 

By Crypto Daily On Tue, 25 Mar 2025 Whales Ignore Bullish Pepe Price Predictions For This Viral $0.07 Altcoin Targeting $7 In 2025

More News: 

By Crypto Daily On Tue, 25 Mar 2025 TON Bullish as Ethereum Exchange Supply Drops to 10-Year Low! BlockDAG Crosses $206M with Keynote 3 Just 3 Days Away

More News: 

By Crypto Daily On Tue, 25 Mar 2025 WhiteBIT Hosts First-Ever Live Trading Championship, with Qualifying-Tournament Kicking Off March 27

More News: 

By Crypto Daily On Tue, 25 Mar 2025 Support Contact Us Sitemap Information About Us Privacy Policy Terms of Use Cookies Disclaimer

Welcome at World Crypto Global. This portal is packed with useful content and resources to built out your own crypto skills. WCG is a site member of ITeGAMAX's online services.

© Copyright ITeGAMAX AB 2025 |  Powered by ITeGAMAX |  Gabriel Vega (Sweden)

The information provided by World Crypto Global on this Site is for general informational purposes only. All information on this Site is provided in good faith, however we make no representation or warranty of any kind, express or implied, regarding the accuracy, adequacy, validity, reliability, availability, or completeness of any information on this Site.

UNDER NO CIRCUMSTANCE SHALL WE HAVE ANY LIABILITY TO YOU FOR ANY LOSS OR DAMAGE OF ANY KIND INCURRED AS A RESULT OF THE USE OF THE SITE OR RELIANCE ON ANY INFORMATION PROVIDED ON THE SITE. YOUR USE OF THE SITE AND YOUR RELIANCE ON ANY INFORMATION ON THE SITE IS SOLELY AT YOUR OWN RISK.

Use of this site is subject to our Terms and Conditions, Disclaimer, and Privacy Policy.

Cookies Consent.

WE AND OUR PARTNERS USE COOKIES ON THIS SITE TO IMPROVE OUR SERVICE, PERFORM ANALYTICS, PERSONALIZE ADVERTISING, MEASURE ADVERTISING PERFORMANCE, AND REMEMBER WEBSITE PREFERENCES.

By using this website, you automatically accept that we use cookies.

To learn more about use of cookies see our Privacy Policy. Learn More.