CYBERSECURITYTRACKER
Permanent story citation

Elastic catches DPRK passing out KANDYKORN

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 7909

As cited

Copy frozen at (site build).

threat intel

Elastic catches DPRK passing out KANDYKORN

Elastic Security Labs identified a campaign by the Democratic People's Republic of Korea (DPRK) targeting blockchain engineers with a new malware named KANDYKORN designed for macOS systems. The operation represents a focused effort to compromise individuals working in the cryptocurrency sector.

Why it matters: Blockchain and cryptocurrency professionals face targeted malware attacks from a nation-state actor, requiring immediate review of macOS security controls and communication channels used by engineering teams.

VendorsApple
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary