TECHNOLOGY
Hackers Trick Crypto Firms with Fake Zoom Updates
Thu Jul 03 2025
North Korean hackers have found a new way to target crypto startups. They are using fake Zoom updates to sneak malware onto Mac computers. This malware, called NimDoor, is more advanced than usual. It uses a mix of different programming languages to steal data and stay hidden.
The hackers first trick people into downloading a fake Zoom update. They do this by sending messages on Telegram, pretending to be someone the victim knows. The message asks the victim to schedule a call using Calendly. Then, they send an email with a fake Zoom link. The link leads to a file that looks like a Zoom update, but it's really malware.
Once the victim downloads and runs the fake update, the malware starts working. It creates a secret connection to a hacker's server. It also makes sure it stays on the computer, even if the computer is restarted or the malware is deleted.
The malware then uses special scripts to steal important information. This includes passwords, browser data, and Telegram messages. The hackers can then use this information to steal money or more data.
This type of hack is becoming more common. Hackers are using more advanced techniques and different programming languages to create malware. This makes it harder for people to protect their computers.
It's important for people to be careful when downloading files, especially from people they don't know. They should also keep their software up to date and use strong passwords to protect their accounts.
continue reading...
questions
How can the principles of cybersecurity be integrated into the design and development of new technologies to prevent such attacks in the future?
If malware had a dating profile, would NimDoor list 'persistent and good with signals' as its strengths?
How does the use of multiple programming languages in this malware make it more challenging to detect and mitigate?
actions
flag content