Crypto Pros Beware: Lazarus Unleashes OtterCookie Malware 🎭

by

Crypto Pros Beware: Lazarus Unleashes OtterCookie Malware 🎭

Lazarus hackers plotting in the shadows

So, North Korea’s favorite digital band of hackers—Lazarus—have cooked up something new. Enter OtterCookie, their shiny new malware toy, designed solely to raid crypto wallets and finance files. Because what’s more fun than stealing your passwords while you’re trying to find that elusive next Bitcoin? 🕵️‍♂️

Apparently, Lazarus isn’t content with just sending spam emails anymore. No, they’re getting fancy—fake job interviews, deepfake recruiter videos that look so real you might want to get a selfie with them, and coding challenges that come with a side of malware. OtterCookie is the sneaky little bugger that sneaks into your macOS Keychain, scrapes your private keys, and leaves you wondering if your computer’s just develop-ing a personality. 😎

🚨SlowMist Security Alert🚨

Lazarus is up to no good with OtterCookie—targeting crypto & finance pros with less charm and more malware.

🎭 Tactics:

  • Fake job interviews and investor calls
  • Deepfake videos for that ‘oh, I know them’ feel

— SlowMist (@SlowMist_Team) June 6, 2025

Basically, if your Mac has had a fondness for secret passwords or private keys, Lazarus might soon be knocking. They’re hyper-focused on the crypto scene—because stealing millions is easier than mining them, apparently. Remember the February $1.5 billion Bybit hack? Yeah, that’s their party trick now.

Recently, they’ve been messing around with npm packages—because why not?—targeting developers and wallets like Solana and Exodus. And just last month, the FBI and some cybersecurity heroes shut down “Blocknovas,” a shady Lazarus website pretending to be a legit US tech company. It’s like spy movie stuff, but less James Bond, more James ‘That Guy You Don’t Want to Invite to Your Computer.’

Crypto folks, listen up: don’t click on weird videos, weird job offers, or download files from strangers. Your computer isn’t a carnival game—don’t get duped! Keep your defenses up, check for odd activity, and maybe, just maybe, skip that suspicious job interview. Or at least wear a fake mustache—just in case.

This year’s crypto hacks are no joke. Over $1.6 billion lost in the first quarter alone. And May was just warm-up—another $244.1 million, thanks to the Cetus Protocol ($220 million gone) and Cork Protocol ($12 million). Maybe it’s time to start investing in a really good firewall instead of that fancy coffee mug you bought last week.

Crypto hacker at work with a laptop

Read More

2025-06-06 11:44