The artifact, MiroTalk.dmg, posing as a video call service actually delivers BeaverTail, a malicious JavaScript stealer malware, previously linked to DPRK cyber espionage activities.
BeaverTail can steal sensitive data and deliver payloads like InvisibleFerret, a Python backdoor, through a macOS disk image, signifying a shift in distribution tactics by DPRK hackers.
Collection
[
|
...
]