Russian gangs target crypto holders with cross-platform spear phishing malware

The Russian cybercriminal gang, known as “Crazy Evil,” lies behind a new rash of social media phishing scams targeting crypto users.

The gang has been identified in new cybersecurity threat reports, with the brains behind more than 10 sophisticated social media phishing scams luring victims to download malware that steals code. The scam reportedly uses sophisticated, bespoke social engineering tactics to convince users to drop and install malware such as Angel Ruler, Atomic Mac OS Steeler, and STEALC.

Crazy Evil Cyber ​​Threat Analysis | Source: Insikt Group

The discovery of the crazy evil threat research costumes that provide insight into the inner workings of the Insikt Group, stated in the presentation:

Crazy and evil tactics are vast and meticulous. Its six sub-teams – Avland, Typed, Deland, Zoomland, Defi and Kevland carry out bespoke scams targeting specific victim profiles. From fishing ladies targeting cryptocurrency influencers to malware payloads designed for cross-platform infections, the group’s tactics reflect a sophisticated understanding of cybersecurity loopholes.

You might like it too: Cado Security Labs flags new malware targeting windows and macos crypto wallets

According to Insikt, Crazy Evil’s capabilities are spread across both Windows and Mac OS, bringing cross-platform benefits when compromising users, marking this gang as a unique risk. Insikt also says that in addition to its sophisticated social engineering and cross-platform capabilities, marking out crazy evils will also help you extract other information that can be used to steal wallet keys and compromise wallet security. It has been revealed that it is explicit targeting of crypto holders using specially designed malware. .

To mitigate the refinement of crazy evil malware attacks, users are encouraged to deploy endpoint detection and response solutions that aggressively scan the presence of specific malware families linked to gangs. Masu. By crazy evil.

December 28th, Chain investigator Taylor Manahan installs malware on victims’ devices using social engineering tactics such as fake Web3 job interviews to eventually steal crypto wallet keys Flagged the presence of similar bad actors.

read more: Scam Sniffer Warns About Fake Influencers and Telegram Bots Spreading Cryptographic Malware