North Korea-linked hacker group TraderTraitor launches a new round of attacks using malicious Terraform projects
BlockBeats News, on September 22, according to disclosure from SlowMist, the North Korea-linked threat group TraderTraitor (also known as UNC4899, Jade Sleet) has launched another attack, and recently breached an IT service company based in India that is unrelated to the crypto industry.
The attack ultimately deployed Rust/ARM64 backdoors FLATROOF and ROOFDECK on the victim's macOS device. These two malware families were previously used in the LayerZero attack as well. They have the capabilities to steal credentials and sensitive data, execute shell commands, collect and exfiltrate files, and gain access to cloud services and code repositories.
SlowMist reminds that the attack targets of TraderTraitor are no longer limited to the crypto industry, and attackers may now pay more attention to developers' access to cloud and API services such as AWS, GCP, OVH, and OpenStack.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
China’s gold imports exceeded 1,000 tons by August, surpassing the total for all of 2025.
Reserve Bank of Australia Governor: The unemployment rate needs to rise towards 5% to cool the labor market and alleviate price pressures.
Reserve Bank of Australia Governor Bullock stated that unemployment needs to rise to 5% to alleviate inflationary pressures, but refused to disclose her voting stance for next week. The market estimates about a 90% probability of a rate hike.
Equities: Energy relief drives risk-on cascade – Danske Bank
Crypto prices
More
