APT-C-26（Lazarus）组织持续升级攻击武器，利用Electron程序瞄准加密货币行业
2025-01-20 • Qihoo360 • APT-C-26 Lazarus Upgrades Attack Tools and Targets the Cryptocurrency Industry with Electron Applications •
360 describes APT-C-26, also tracked as Lazarus, using Electron-packaged malicious applications against cryptocurrency users and organizations. The campaign reportedly poisoned a uniswap-sniper-bot project and delivered an installer masquerading as an automated trading tool, which then downloaded and executed malicious code to steal sensitive information. The activity aligns with Lazarus financial targeting and software supply-chain style lures against the cryptocurrency sector.
Indicators of Compromise
| Type | Value | First Seen | Last Seen |
|---|---|---|---|
| IPv4 | 86.104.74.51 | 2024-12-03 | 2025-11-13 |
| HASH | 42595da250a90129217f1dea56bfbbd… | 2025-01-20 | 2025-03-17 |
| HASH | 892ff266fd4082e1f0085ffaffdb834… | 2025-01-20 | 2025-01-20 |
| HASH | 9a2c4b277b1340f7ce43b6279310ab0… | 2025-01-20 | 2025-01-20 |
| HASH | bbf676979afc011b0891906a6aaaf63… | 2025-01-20 | 2025-01-20 |
| HASH | 74b7e637797348b962964430922bd3c… | 2025-01-20 | 2025-01-20 |
| HASH | 24b89c77eaeebd4b02c8e8ab6ad3bd7… | 2024-09-04 | 2025-01-20 |
| HASH | 000b4a77b1905cabdb59d2b576f6da1… | 2024-09-04 | 2025-01-20 |
| HASH | b8e69d6a766b9088d650e850a638d7a… | 2024-09-04 | 2025-01-20 |
| HASH | 36cac29ff3c503c2123514ea903836d… | 2024-08-13 | 2025-01-20 |
Related Actors
Related Reports
Shares tag: APT-C-26 • Same author: Qihoo360 • Published within a month
Shares tag: APT-C-26 • Same author: Qihoo360 • Published within a month
Shares tag: APT-C-26 • Same author: Qihoo360
Shares tag: APT-C-26 • Same author: Qihoo360
Shares tag: APT-C-26 • Same author: Qihoo360
Shares tag: APT-C-26 • Same author: Qihoo360