In a sinister cyberattack, North Korean hackers have deployed a novel malware strain, Durian, to infiltrate South Korean cryptocurrency companies. According to Kaspersky's threat report, the notorious hacking group Kimsuky has exploited legitimate security software to launch sustained attacks on at least two crypto firms.

This cunning tactic enables the Durian malware to install a plethora of malicious tools, including the LazyLoad proxy tool and Chrome Remote Desktop, granting hackers comprehensive backdoor access for command execution, file downloads, and data leakage. Kaspersky's analysis reveals a possible connection between Kimsuky and the infamous Lazarus Group, a prominent crypto hacking consortium.

The Lazarus Group has been wreaking havoc since 2009, amassing a staggering $3 billion in stolen crypto assets by 2023. In 2023 alone, they plundered over $309 million, accounting for 17% of the total funds stolen that year. The crypto market has suffered significantly, with over $1.8 billion lost to hacking and vulnerabilities in 2023, according to Immunefi's report. As the threat landscape evolves, crypto companies must remain vigilant and bolster their security measures to counter these sophisticated attacks.