North Korean Hackers Tageting Crypto Experts with KANDYKORN macOS Malware

State-sponsored threat actors from the Democratic People's Republic of Korea (DPRK) have been found targeting blockchain engineers of an unnamed crypto exchange platform via Discord with a novel macOS malware dubbed KANDYKORN.
Elastic Security Labs said the activity, traced back to April 2023, exhibits overlaps with the infamous adversarial collective Lazarus Group, citing an analysis of the

adversarial april back blockchain crypto discord dprk elastic elastic security elastic security labs engineers exchange experts found hackers korea labs macos macos malware malware north north korean north korean hackers novel people platform security sponsored state targeting threat threat actors