NORTH KOREAN-LINKED HACKERS WERE CAUGHT EXPERIMENTING WITH NEW MACOS MALWARE

Summary from the TLDR InfoSec newsletter

Three variants of a new macOS malware have been detected. One variant was written in Python, one in Golang, and one using Flutter, which heavily obfuscates code by default. The malware was embedded in a clone of Minesweeper. No evidence of exploitation has been found - the callback domain returns a 404. The malware appeared to target cryptocurrency developers. It had several of the hallmarks of a Lazarus group attack.