North Korean hackers exploited previously unknown bug in Chrome-based browsers to steal cryptocurrencies

Hackers created fake websites for crypto trading platforms. These sites were then used to distribute fake jobs or lure people into downloading wallets or trading apps.

The attack began from the moment the site was visited, at which time the malicious code began to be executed.

Taking advantage of another vulnerability in the Windows kernel, hackers installed a rootkit on the victim’s computer. At this point, the victim has virtually no chance to defend himself, and hackers can completely control her computer.

The first use of the bug was recorded on August 19, and on August 21 the problem was resolved.

The Citrine Sleet group was behind the hack.

The number of victims is unknown.