A new macOS stealer (Nova) uses LaunchAgents to install a modular backdoor. Its main function is replacing legitimate Ledger/Trezor apps with phishing clones that exfiltrate seed phrases as users type.
Modular Malware
Discover the sophisticated tactics of the Lazarus Group in their latest DeathNote Campaign. Learn how they exploit fake job opportunities to infiltrate defense, aerospace, cryptocurrency, and nuclear sectors.