Microsoft: DEV-0139 launches targeted attacks against the cryptocurrency industry

12/07 08:07

Accoding to Microsoft official website report, Microsoft recently investigated a crypto attack where the threat actor, tracked as DEV-0139, took advantage of Telegram chat groups to target cryptocurrency investment companies. DEV-0139 joined Telegram groups used to facilitate communication between VIP clients and cryptocurrency exchange platforms and identified their target from among the members. The threat actor posed as representatives of another cryptocurrency investment company, and in October 2022 invited the target to a different chat group and pretended to ask for feedback on the fee structure used by cryptocurrency exchange platforms. After gaining the target’s trust, DEV-0139 then sent a weaponized Excel file which contained several tables about fee structures among cryptocurrency exchange companies. The malicious DLL file lets the threat actor remotely access the infected system.

22SukaBagikan

Penafian：Konten diatas tidak merepresentasikan posisi HTX.，HTX tidak memberikan rekomendasi perdagangan apa pun.。