DangerousPassword attacks targeting developers’ Windows, macOS, and Linux environments

At the end of May 2023, JPCERT/CC confirmed an attack targeting developers of cryptocurrency exchange businesses, and it is considered to be related to the targeted attack group DangerousPassword [1], [2] (a.k.a. CryptoMimic or SnatchCrypto), which has been continuously attacking since June 2019. This attack targeted Windows, macOS, and Linux environments with Python and Node.js installed on the machine. This article explains the attack that JPCERT/CC has confirmed and the malware used.

Attacks in the Windows environment starting from Python …

attack attacks businesses cryptocurrency cryptocurrency exchange developers end environments exchange june linux macos malware analysis may may 2023 snatchcrypto targeted attack targeting windows