Evilnum strikes commodities and cryptocurrency Forum

Threat Level

Actor Report

For a detailed advisory, download the pdf file here

Summary

In recent campaigns, the Evilnum actor group has targeted the Decentralized Finance (DeFi) sector using Evilnum Malware. The latest iteration of Evilnum backdoor employs a diverse set of ISO, Microsoft Word, and Shortcut (LNK) files. Furthermore, the malware is used for reconnaissance, data theft, and the deployment of further payloads.