Russian gang targets crypto holders with cross-platform spear-phishing malware

A Russian cybercrime gang called “Crazy Evil” is behind a new eruption of social media phishing switches targeting crypto users.

The gang has been identified in a new threat of cybersecurity report Like the brain behind more than 10 sophisticated Social Media Sophisticated Socials that attract victims of download malware It steals their crypto. The scams would have used highly tailor -made social engineering tactics to convince users to file their guard and install malware such as Angel Drainher, Atomic Mac OS Stealer and Stealc.

Offering an overview of the interior work of Crazy Evil, an Insikt group of threats research clothes, which has discovered, said in a announcement::

Crazy Evil’s operation is both large and meticulous. Its six sub -teams – Avland, Dactylographed, Deland, Zoomland, Defi and Kevland – direct tailor -made scams targeting profiles of specific victims. From phishing lures intended for influencers of cryptocurrencies with useful charges of malicious software designed for a multiplatform infection, group tactics reflect an advanced understanding of cybersecurity gaps.

According to Insikt, Crazy Evil’s abilities extend on Windows and Mac OS, which gives it a multiplatform advantage in compromise users, which marks this gang as a unique dangerous. Insikt has also revealed that in addition to its sophisticated social engineering capacity and its multiplatform capacities, which marks Crazy Evil is its explicit targeting of crypto holders with malicious software specially designed to fly portfolio keys and extract d ‘Other information that can be used to compromise the safety of the wallet portfolio.

To alleviate the sophistication of crazy malware attacks, users are encouraged to deploy detection and response solutions of termination points that are actively looking for the presence of specific malware related to gang, as well as monitoring and filtering Web to block access to controlled malware controlled by crazy evil.

On December 28, the Taylor Manahan channel investigator reported The existence of bad similar players who used social engineering tactics such as false web3 job interviews to install malicious software on the devices of victims in order to finally steal their keys to cryptographic wallet.