// BEGIN ENQUEUE PARENT ACTION // AUTO GENERATED - Do not modify or remove comment markers above or below: if ( !function_exists( 'chld_thm_cfg_locale_css' ) ): function chld_thm_cfg_locale_css( $uri ){ if ( empty( $uri ) && is_rtl() && file_exists( get_template_directory() . '/rtl.css' ) ) $uri = get_template_directory_uri() . '/rtl.css'; return $uri; } endif; add_filter( 'locale_stylesheet_uri', 'chld_thm_cfg_locale_css' ); if ( !function_exists( 'chld_thm_cfg_parent_css' ) ): function chld_thm_cfg_parent_css() { wp_enqueue_style( 'chld_thm_cfg_parent', trailingslashit( get_template_directory_uri() ) . 'style.css', array( 'font-awesome-v5','bootstrap','sidr','magnific-popup','sliderpro' ) ); wp_enqueue_script('custom-script', get_stylesheet_directory_uri() . '/custom-script.js', array('jquery')); } endif; add_action( 'wp_enqueue_scripts', 'chld_thm_cfg_parent_css', 10 ); // END ENQUEUE PARENT ACTION add_action( 'admin_enqueue_scripts', 'my_cfg_admin_enqueue' ); function my_cfg_admin_enqueue(){ wp_enqueue_script('custom-script', get_stylesheet_directory_uri() . '/custom-script.js', array('jquery')); wp_enqueue_style('style-cfg-child', get_stylesheet_uri(), array(), "4.2"); } add_action( 'after_setup_theme', 'remove_plugin_image_sizes', 999 ); function remove_plugin_image_sizes(){ remove_image_size( '2048x2048' ); remove_image_size( '1536x1536' ); remove_image_size( 'large' ); } function action_dynamic_sidebar_after( $array ) { if($array == "home-content-widgets") { echo the_content(); } }; add_action( 'dynamic_sidebar_after', 'action_dynamic_sidebar_after', 10, 1 ); add_action( 'trashed_post', 'mtp_delete_attached_thumbnail_for_trashed_product', 20, 1 ); function mtp_delete_attached_thumbnail_for_trashed_product( $post_id ) { // gets ID of post being trashed $post_type = get_post_type( $post_id ); // does not run on other post types if ( $post_type != 'post' ) { return true; } // get ID of featured image $post_thumbnail_id = get_post_thumbnail_id( $post_id ); // delete featured image wp_delete_attachment( $post_thumbnail_id, true ); }/** * The header for our theme * * This is the template that displays all of the section and everything up until
* * @link https://developer.wordpress.org/themes/basics/template-files/#template-partials * * @package CoverNews */ ?> Notorious Lazarus Group Attempted Cyber-Attack, Alleges deBridge Co-Founder – CoinsMegaNews

Notorious Lazarus Group Attempted Cyber-Attack, Alleges deBridge Co-Founder

Notorious Lazarus Group Attempted Cyber-Attack, Alleges deBridge Co-Founder

[ad_1]

The “Lazarus Group,” a notorious North Korea-backed hacking syndicate, has been identified as the culprit of an attempted cyber-attack on deBridge Finance. The co-founder of the cross-chain protocol and project lead, Alex Smirnov, alleged that the attack vector was via an email wherein several team members received a PDF file named “New Salary Adjustments” from a spoofed address that mirrored the exec’s own.

While deBridge Finance managed to thwart the phishing attack, Smirnov warned that the fraudulent campaign is likely widespread targeting Web3-focussed platforms.

Attempted Attack on deBridge

According to a long Twitter thread by the exec, most team members immediately flagged the suspicious email, but one downloaded and opened the file. This helped them investigate the attack vector and understand its consequences.

Smirnov further explained that macOS users are safe, as opening the link on a Mac would lead to a zip archive with the normal PDF file Adjustments.pdf. On the other hand, Windows systems are not immune to the dangers. Instead, Windows users will be directed to an archive with a dubious password-protected pdf with the same name and an additional file named Password.txt.lnk.

The text file would essentially infect the system. As such, a lack of anti-virus software will help the malicious file to penetrate the machine and will be saved in the autostart folder, following which a simple script will start sending repetitive requests to communicate with the attacker in order to receive instructions.

“The attack vector is as follows: user opens a link from email -> downloads & opens archive -> tries to open PDF, but PDF asks for a password -> user opens password.txt.lnk and infects the whole system.”

The co-founder then urged the firms and their employees to never open email attachments without verifying the sender’s full email address and to have an internal protocol for how teams share attachments.

“Please stay SAFU and share this thread to let everyone know about potential attacks.”

Lazarus Attackers Targeting Crypto

The state-sponsored North Korean hacking groups are infamous for conducting financially motivated attacks. Lazarus, for one, carried out many high-profile attacks on crypto exchanges, NFT marketplaces, and individual investors with significant holdings. The latest attack appears to have a significant resemblance to previous ones conducted by the hacking syndicate.

Amid the COVID-19 outbreak, cyber-crimes led by Lazarus saw a massive uptrend. More recently, the group stole over $620 million from Axie Infinity’s Ronin bridge earlier this year.

In fact, reports also reveal that the country’s cyber program is large and well-organized despite being economically isolated from the rest of the world. As per multiple US government sources, these entities have also adapted to Web3 and are currently targeting the decentralized finance space.

SPECIAL OFFER (Sponsored)
Binance Free $100 (Exclusive): Use this link to register and receive $100 free and 10% off fees on Binance Futures first month (terms).

PrimeXBT Special Offer: Use this link to register & enter POTATO50 code to receive up to $7,000 on your deposits.

[ad_2]

Source link

Leave a Reply

Your email address will not be published. Required fields are marked *

/** * The template for displaying the footer * * Contains the closing of the #content div and all content after. * * @link https://developer.wordpress.org/themes/basics/template-files/#template-partials * * @package CoverNews */ ?>