A new phishing campaign, dubbed HaoBao, has been discovered by McAfee and is thought to be the work of well-known cybercrime group Lazarus.
The company calls it “a sophisticated malware with long-term impact”, reports IT Pro, and uses phishing emails that look like innocent recruitment messages. This new variant is going after Bitcoin users.
McAfee said: “In this latest discovery by McAfee ATR, despite a short pause in similar operations, the Lazarus group targets crypto currency and financial organisations. Furthermore, we have observed an increased usage of limited data gathering modules to quickly identify targets for further attacks.
“This campaign is tailored to identifying those who are running Bitcoin related software trough specific system scans.”