Technologist Mag
  • Home
  • Tech News
  • AI
  • Apps
  • Gadgets
  • Gaming
  • Guides
  • Laptops
  • Mobiles
  • Wearables
  • More
    • Web Stories
    • Trending
    • Press Release

Subscribe to Updates

Get the latest tech news and updates directly to your inbox.

What's On

The Inside Story of Eric Trump’s American Bitcoin

31 July 2025

Cronos: The New Dawn Is Coming To Switch 2 In September

31 July 2025

Amazon Great Freedom Festival Sale 2025: Best Deals on Laptops Under Rs. 50,000

31 July 2025

Amazon Great Freedom Festival Sale 2025: Best Deals on Samsung Smartphones

31 July 2025

The Best Video Doorbell Cameras

31 July 2025
Facebook X (Twitter) Instagram
Facebook X (Twitter) Instagram
Technologist Mag
SUBSCRIBE
  • Home
  • Tech News
  • AI
  • Apps
  • Gadgets
  • Gaming
  • Guides
  • Laptops
  • Mobiles
  • Wearables
  • More
    • Web Stories
    • Trending
    • Press Release
Technologist Mag
Home » North Korean Hackers Use NimDoor macOS Malware to Target Web3, Crypto Platforms
Laptops

North Korean Hackers Use NimDoor macOS Malware to Target Web3, Crypto Platforms

By technologistmag.com3 July 20252 Mins Read
Share
Facebook Twitter Reddit Telegram Pinterest Email

North Korean hackers are using a special type of malware known as NimDoor to target macOS computers used at Web3 and crypto firms, according to details shared by a cybersecurity research firm. The threat actors are reportedly using bash scripts to collect and transfer sensitive information, such as browser data, iCloud Keychain credentials, and Telegram user data. The attacks rely on social engineering (via a chat platform) and malicious scripts or updates, like others linked to the Democratic People’s Republic of Korea (DPRK).

NimDoor Maintains Access After Malware Termination or System Reboot

Analysis of the NimDoor malware by Sentinel Labs shows that DPRK-linked threat actors are relying on a combination of malicious binaries and scripts that are written in three languages: C++, Nim, and AppleScript. These Nim-compiled binaries are reportedly being used to target Mac computers used in crypto and Web3 firms.

Victims are contacted via messaging apps like Telegram, and the hackers use social engineering to convince a person to join a call using a scheduling service like Calendly. In order to infect the victim’s system, the threat actor sends an email with a malicious “Zoom SDK update” script that installs the malware silently, while allowing it to communicate with a command and control (C2) server.

Once the malware is installed on the target’s Mac computer, the hackers execute bash (terminal) scripts to access and exfiltrate data from browsers like Google Chrome, Microsoft Edge, Arc, Brave, and Firefox. It can also steal iCloud Keychain credentials and Telegram user data from the target’s device.

The cybersecurity research firm also noted that the NimDoor malware feature a “signal-based persistence mechanism” (using SIGINT/SIGTERM handlers) to reinstall itself and continue operating on a target device, even if the malicious process it terminated, or the system is rebooted.

You can read more about the NimDoor malware used to target Web3 and crypto firms on Sentinel Labs’ website, which includes detailed explanations of how the North Korean hackers used novel techniques to gain persistent access to victims’ computers.

The firm also warns that threat actors are increasingly using less popular programming languages to target victims. This is because as they are less familiar to analysts and offer some technical benefits over more widely used languages, while making it difficult to detect and block using existing security measures. . 

Share. Facebook Twitter Pinterest LinkedIn Telegram Reddit Email
Previous ArticleA Trans Pilot Was Falsely Blamed for a Plane Crash. Now She’s Fighting the Right-Wing Disinfo Machine
Next Article Google Veo 3 Video Generation Model Comes to India, Available to Paid Subscribers

Related Articles

Amazon Great Freedom Festival Sale 2025: Best Deals on Laptops Under Rs. 50,000

31 July 2025

Amazon Great Freedom Festival Sale 2025: Best Deals on iPad Air, MacBook, AirPods, Other Apple Products

31 July 2025

Samsung Galaxy Book 4 Edge AI PC Launched in India With Snapdragon X Processor, Galaxy AI Features

31 July 2025

Amazon Freedom Sale 2025: Gaming Laptops Available With Up to Rs. 50,000 Discount

31 July 2025

Amazon Great Freedom Festival Sale Is Live: Best Offers on Smartphones, Electronics

31 July 2025

Ulefone Armor 33 Pro – Price in India, Specifications (30th July 2025)

30 July 2025
Stay In Touch
  • Facebook
  • Twitter
  • Pinterest
  • Instagram
  • YouTube
  • Vimeo

Subscribe to Updates

Get the latest tech news and updates directly to your inbox.

Don't Miss

Cronos: The New Dawn Is Coming To Switch 2 In September

By technologistmag.com31 July 2025

Cronos: The New Dawn, the upcoming original sci-fi horror game from Bloober Team (the developer…

Amazon Great Freedom Festival Sale 2025: Best Deals on Laptops Under Rs. 50,000

31 July 2025

Amazon Great Freedom Festival Sale 2025: Best Deals on Samsung Smartphones

31 July 2025

The Best Video Doorbell Cameras

31 July 2025

Amazon Great Freedom Festival Sale 2025: Best Deals on Smartwatches From OnePlus, Samsung, Noise, Amazfit, and More

31 July 2025
Technologist Mag
Facebook X (Twitter) Instagram Pinterest
  • Privacy
  • Terms
  • Advertise
  • Contact
© 2025 Technologist Mag. All Rights Reserved.

Type above and press Enter to search. Press Esc to cancel.