{"id":187255,"date":"2024-10-24T12:54:51","date_gmt":"2024-10-24T12:54:51","guid":{"rendered":"https:\/\/kr.cryptonews.com\/news\/lazarus-hackers-exploit-zero-day-vulnerability-in-chrome-using-fake-nft-games\/"},"modified":"2024-10-24T12:54:51","modified_gmt":"2024-10-24T12:54:51","slug":"lazarus-hackers-exploit-zero-day-vulnerability-in-chrome-using-fake-nft-games","status":"publish","type":"post","link":"https:\/\/cryptonews.com\/kr\/news\/lazarus-hackers-exploit-zero-day-vulnerability-in-chrome-using-fake-nft-games\/","title":{"rendered":"\ub77c\uc790\ub8e8\uc2a4 \ud574\ucee4, \uac00\uc9dc NFT \uac8c\uc784\uc744 \uc0ac\uc6a9\ud558\uc5ec \ud06c\ub86c\uc758 \uc81c\ub85c\ub370\uc774 \ucde8\uc57d\uc810 \uc545\uc6a9"},"content":{"rendered":"
\"\"<\/figure>

사이버 보안 업체인 카스퍼스키가 북한의 해킹 그룹인 라자루스가 주도하는 고도로 정교한 암호화폐 표적 악성 캠페인을 발견했다.<\/p>

수요일에 공개된 이 캠페인<\/a>은 라자루스 그룹이 가짜 블록체인 기반 게임을 사용하여 구글 크롬의 제로데이 취약점을 악용했다. 이번 해킹은 스파이웨어를 설치하여 지갑 자격 증명을 훔치는 것으로 밝혀졌다.<\/p>

2024년 5월 카스퍼스키의 글로벌 연구 및 분석 팀이 확인한 이 공격의 발견은 발리에서 열린 2024 보안 분석가 서밋에서 발표되었다.<\/p>

분석 결과, 이 악성 캠페인은 암호화폐 투자자를 표적으로 삼기 위해 사회 공학 기술과 생성 AI를 사용한 것으로 밝혀졌다.<\/p>

카스퍼스키의 수석 보안 전문가인 보리스 라린은 “해커들은 구글 크롬 제로데이를 악용하고 표적 시스템을 감염시키기 위해 완전한 기능을 갖춘 게임을 위장막으로 사용함으로써 일반적인 전술을 뛰어넘었다.”라고 말했다.<\/p>

“라자루스와 같은 악명 높은 해커들은 소셜 네트워크나 이메일의 링크를 클릭하는 것과 같이 무해해 보이는 행동도 개인 컴퓨터나 기업 네트워크 전체를 완전히 손상시킬 수 있다.”<\/p>

라린은 이 캠페인의 실제 영향력은 훨씬 더 커서 전 세계 사용자와 기업에 영향을 미칠 수 있다고 덧붙였다.<\/p>

카스퍼스키, 해커들은 가짜 게임 웹사이트를 사용하여 취약점을 악용했다<\/strong><\/h2><\/span>

사이버 보안 전문가 팀에 따르면 라자루스 그룹은 두 가지 취약점을 악용했다. 여기에는 구글의 오픈 소스 및 웹 어셈블리 엔진의 V8 자바스크립트에서 알려지지 않은 버그가 포함됐다. 구글은 나중에 카스퍼스키의 보고에 따라 해당 취약점을 수정했다.<\/p>

“이를 통해 해커들은 임의의 코드를 실행하고 보안 기능을 우회하며 다양한 악의적인 활동을 수행할 수 있게 되었다.” 이는 연구 결과 밝혀진 사실이다.<\/p>

이 가짜 블록체인 기반 게임은 사용자들을 전 세계에서 NFT 탱크로 경쟁하도록 초대했다. 악명 높은 이 그룹은 진짜처럼 보이도록 소셜 미디어와 링크드인 홍보 활동을 설계하고 게임을 홍보했다. 또한 신뢰도를 높이기 위해 AI로 생성된 이미지를 만들기도 했다.<\/p>

또한 해커들은 홍보를 위해 암호화폐 인플루언서들의 참여를 유도하기도 했다.<\/p>

해커들이 소셜 미디어에 게임을 출시한 직후, 실제 게임 개발자<\/a>는 자신의 지갑에서 2만 달러의 암호화폐가 이체되었다고 주장했다.<\/p>

전문가들은 가짜 게임이 원본의 로고와 시각적 품질을 정확히 반영했다고 주장했다. 결과적으로 라자루스 해커들은 자신들의 공격에 신빙성을 부여하기 위해 많은 시도를 이어 나아갔다.<\/p>

또한 해커들은 원본 버전의 모든 참조를 사용하여 훔친 소스 코드를 사용하여 가짜 NFT 게임을 만들기도 했다.


<\/p>","protected":false},"excerpt":{"rendered":"

사이버 보안 업체인 카스퍼스키가 북한의 해킹 그룹인 라자루스가 주도하는 고도로 정교한 암호화폐 표적 악성 캠페인을 발견했다.수요일에 공개된 이 캠페인은 라자루스 그룹이 가짜 블록체인 기반 게임을 사용하여 구글 크롬의 제로데이 취약점을 악용했다. 이번 해킹은 스파이웨어를 설치하여 지갑 자격 증명을 훔치는 것으로 밝혀졌다.2024년 5월 카스퍼스키의 글로벌 연구 및 분석 팀이 확인한 이 공격의 발견은 발리에서 열린 2024 […]<\/p>\n","protected":false},"author":254,"featured_media":187256,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1,9],"tags":[],"editors":[],"sponsored_companies":[],"class_list":["post-187255","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","category-blockchain-news"],"acf":[],"yoast_head":"\n\ub77c\uc790\ub8e8\uc2a4 \ud574\ucee4, \uac00\uc9dc NFT \uac8c\uc784\uc744 \uc0ac\uc6a9\ud558\uc5ec \ud06c\ub86c\uc758 \uc81c\ub85c\ub370\uc774 \ucde8\uc57d\uc810 \uc545\uc6a9<\/title>\n<meta name=\"description\" content=\"\uc0ac\uc774\ubc84 \ubcf4\uc548 \uc5c5\uccb4\uc778 \uce74\uc2a4\ud37c\uc2a4\ud0a4\uc5d0 \uc758\ud558\uba74 \ubd81\ud55c \ud574\ud0b9 \uadf8\ub8f9 \ub77c\uc790\ub8e8\uc2a4\uac00 \uc554\ud638\ud654\ud3d0 \ud22c\uc790\uc790\ub97c \ud45c\uc801\uc73c\ub85c \uc0bc\uae30 \uc704\ud574 \uc0ac\ud68c \uacf5\ud559 \uae30\uc220\uacfc \uc0dd\uc131 AI\ub97c \uc0ac\uc6a9\ud55c \uc545\uc131 \ucea0\ud398\uc778\uc744 \uc0ac\uc6a9\ud558\uace0 \uc788\ub2e4.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptonews.com\/kr\/news\/lazarus-hackers-exploit-zero-day-vulnerability-in-chrome-using-fake-nft-games\/\" \/>\n<meta property=\"og:locale\" content=\"ko_KR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\ub77c\uc790\ub8e8\uc2a4 \ud574\ucee4, \uac00\uc9dc NFT \uac8c\uc784\uc744 \uc0ac\uc6a9\ud558\uc5ec \ud06c\ub86c\uc758 \uc81c\ub85c\ub370\uc774 \ucde8\uc57d\uc810 \uc545\uc6a9\" \/>\n<meta property=\"og:description\" content=\"\uc0ac\uc774\ubc84 \ubcf4\uc548 \uc5c5\uccb4\uc778 \uce74\uc2a4\ud37c\uc2a4\ud0a4\uc5d0 \uc758\ud558\uba74 \ubd81\ud55c \ud574\ud0b9 \uadf8\ub8f9 \ub77c\uc790\ub8e8\uc2a4\uac00 \uc554\ud638\ud654\ud3d0 \ud22c\uc790\uc790\ub97c \ud45c\uc801\uc73c\ub85c \uc0bc\uae30 \uc704\ud574 \uc0ac\ud68c \uacf5\ud559 \uae30\uc220\uacfc \uc0dd\uc131 AI\ub97c \uc0ac\uc6a9\ud55c \uc545\uc131 \ucea0\ud398\uc778\uc744 \uc0ac\uc6a9\ud558\uace0 \uc788\ub2e4.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptonews.com\/kr\/news\/lazarus-hackers-exploit-zero-day-vulnerability-in-chrome-using-fake-nft-games\/\" \/>\n<meta property=\"og:site_name\" content=\"Cryptonews Korea\" \/>\n<meta property=\"article:published_time\" content=\"2024-10-24T12:54:51+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cimg.co\/wp-content\/uploads\/sites\/18\/2024\/10\/24124248\/image-1.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"686\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:description\" content=\"\uc0ac\uc774\ubc84 \ubcf4\uc548 \uc5c5\uccb4\uc778 \uce74\uc2a4\ud37c\uc2a4\ud0a4\uc5d0 \uc758\ud558\uba74 \ubd81\ud55c \ud574\ud0b9 \uadf8\ub8f9 \ub77c\uc790\ub8e8\uc2a4\uac00 \uc554\ud638\ud654\ud3d0 \ud22c\uc790\uc790\ub97c \ud45c\uc801\uc73c\ub85c \uc0bc\uae30 \uc704\ud574 \uc0ac\ud68c \uacf5\ud559 \uae30\uc220\uacfc \uc0dd\uc131 AI\ub97c \uc0ac\uc6a9\ud55c \uc545\uc131 \ucea0\ud398\uc778\uc744 \uc0ac\uc6a9\ud558\uace0 \uc788\ub2e4.\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/cimg.co\/wp-content\/uploads\/sites\/18\/2024\/10\/24124248\/image-1.jpeg\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\ub77c\uc790\ub8e8\uc2a4 \ud574\ucee4, \uac00\uc9dc NFT \uac8c\uc784\uc744 \uc0ac\uc6a9\ud558\uc5ec \ud06c\ub86c\uc758 \uc81c\ub85c\ub370\uc774 \ucde8\uc57d\uc810 \uc545\uc6a9","description":"\uc0ac\uc774\ubc84 \ubcf4\uc548 \uc5c5\uccb4\uc778 \uce74\uc2a4\ud37c\uc2a4\ud0a4\uc5d0 \uc758\ud558\uba74 \ubd81\ud55c \ud574\ud0b9 \uadf8\ub8f9 \ub77c\uc790\ub8e8\uc2a4\uac00 \uc554\ud638\ud654\ud3d0 \ud22c\uc790\uc790\ub97c \ud45c\uc801\uc73c\ub85c \uc0bc\uae30 \uc704\ud574 \uc0ac\ud68c \uacf5\ud559 \uae30\uc220\uacfc \uc0dd\uc131 AI\ub97c \uc0ac\uc6a9\ud55c \uc545\uc131 \ucea0\ud398\uc778\uc744 \uc0ac\uc6a9\ud558\uace0 \uc788\ub2e4.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptonews.com\/kr\/news\/lazarus-hackers-exploit-zero-day-vulnerability-in-chrome-using-fake-nft-games\/","og_locale":"ko_KR","og_type":"article","og_title":"\ub77c\uc790\ub8e8\uc2a4 \ud574\ucee4, \uac00\uc9dc NFT \uac8c\uc784\uc744 \uc0ac\uc6a9\ud558\uc5ec \ud06c\ub86c\uc758 \uc81c\ub85c\ub370\uc774 \ucde8\uc57d\uc810 \uc545\uc6a9","og_description":"\uc0ac\uc774\ubc84 \ubcf4\uc548 \uc5c5\uccb4\uc778 \uce74\uc2a4\ud37c\uc2a4\ud0a4\uc5d0 \uc758\ud558\uba74 \ubd81\ud55c \ud574\ud0b9 \uadf8\ub8f9 \ub77c\uc790\ub8e8\uc2a4\uac00 \uc554\ud638\ud654\ud3d0 \ud22c\uc790\uc790\ub97c \ud45c\uc801\uc73c\ub85c \uc0bc\uae30 \uc704\ud574 \uc0ac\ud68c \uacf5\ud559 \uae30\uc220\uacfc \uc0dd\uc131 AI\ub97c \uc0ac\uc6a9\ud55c \uc545\uc131 \ucea0\ud398\uc778\uc744 \uc0ac\uc6a9\ud558\uace0 \uc788\ub2e4.","og_url":"https:\/\/cryptonews.com\/kr\/news\/lazarus-hackers-exploit-zero-day-vulnerability-in-chrome-using-fake-nft-games\/","og_site_name":"Cryptonews Korea","article_published_time":"2024-10-24T12:54:51+00:00","og_image":[{"width":1200,"height":686,"url":"https:\/\/cimg.co\/wp-content\/uploads\/sites\/18\/2024\/10\/24124248\/image-1.jpeg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_description":"\uc0ac\uc774\ubc84 \ubcf4\uc548 \uc5c5\uccb4\uc778 \uce74\uc2a4\ud37c\uc2a4\ud0a4\uc5d0 \uc758\ud558\uba74 \ubd81\ud55c \ud574\ud0b9 \uadf8\ub8f9 \ub77c\uc790\ub8e8\uc2a4\uac00 \uc554\ud638\ud654\ud3d0 \ud22c\uc790\uc790\ub97c \ud45c\uc801\uc73c\ub85c \uc0bc\uae30 \uc704\ud574 \uc0ac\ud68c \uacf5\ud559 \uae30\uc220\uacfc \uc0dd\uc131 AI\ub97c \uc0ac\uc6a9\ud55c \uc545\uc131 \ucea0\ud398\uc778\uc744 \uc0ac\uc6a9\ud558\uace0 \uc788\ub2e4.","twitter_image":"https:\/\/cimg.co\/wp-content\/uploads\/sites\/18\/2024\/10\/24124248\/image-1.jpeg","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/cryptonews.com\/kr\/news\/lazarus-hackers-exploit-zero-day-vulnerability-in-chrome-using-fake-nft-games\/#article","isPartOf":{"@id":"https:\/\/cryptonews.com\/kr\/news\/lazarus-hackers-exploit-zero-day-vulnerability-in-chrome-using-fake-nft-games\/"},"author":{"name":"hyounjunl","@id":"https:\/\/cryptonews.com\/kr\/#\/schema\/person\/3ef13b3eb67907f954c7d8672a3e2374"},"headline":"\ub77c\uc790\ub8e8\uc2a4 \ud574\ucee4, \uac00\uc9dc NFT \uac8c\uc784\uc744 \uc0ac\uc6a9\ud558\uc5ec \ud06c\ub86c\uc758 \uc81c\ub85c\ub370\uc774 \ucde8\uc57d\uc810 \uc545\uc6a9","datePublished":"2024-10-24T12:54:51+00:00","mainEntityOfPage":{"@id":"https:\/\/cryptonews.com\/kr\/news\/lazarus-hackers-exploit-zero-day-vulnerability-in-chrome-using-fake-nft-games\/"},"wordCount":6,"publisher":{"@id":"https:\/\/cryptonews.com\/kr\/#organization"},"image":{"@id":"https:\/\/cryptonews.com\/kr\/news\/lazarus-hackers-exploit-zero-day-vulnerability-in-chrome-using-fake-nft-games\/#primaryimage"},"thumbnailUrl":"https:\/\/cimg.co\/wp-content\/uploads\/sites\/18\/2024\/10\/24124248\/image-1.jpeg","articleSection":["News","\ube14\ub85d\uccb4\uc778 \ub274\uc2a4"],"inLanguage":"ko-KR","copyrightYear":"2024","copyrightHolder":{"@id":"https:\/\/cryptonews.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/cryptonews.com\/kr\/news\/lazarus-hackers-exploit-zero-day-vulnerability-in-chrome-using-fake-nft-games\/","url":"https:\/\/cryptonews.com\/kr\/news\/lazarus-hackers-exploit-zero-day-vulnerability-in-chrome-using-fake-nft-games\/","name":"\ub77c\uc790\ub8e8\uc2a4 \ud574\ucee4, \uac00\uc9dc NFT \uac8c\uc784\uc744 \uc0ac\uc6a9\ud558\uc5ec \ud06c\ub86c\uc758 \uc81c\ub85c\ub370\uc774 \ucde8\uc57d\uc810 \uc545\uc6a9","isPartOf":{"@id":"https:\/\/cryptonews.com\/kr\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptonews.com\/kr\/news\/lazarus-hackers-exploit-zero-day-vulnerability-in-chrome-using-fake-nft-games\/#primaryimage"},"image":{"@id":"https:\/\/cryptonews.com\/kr\/news\/lazarus-hackers-exploit-zero-day-vulnerability-in-chrome-using-fake-nft-games\/#primaryimage"},"thumbnailUrl":"https:\/\/cimg.co\/wp-content\/uploads\/sites\/18\/2024\/10\/24124248\/image-1.jpeg","datePublished":"2024-10-24T12:54:51+00:00","description":"\uc0ac\uc774\ubc84 \ubcf4\uc548 \uc5c5\uccb4\uc778 \uce74\uc2a4\ud37c\uc2a4\ud0a4\uc5d0 \uc758\ud558\uba74 \ubd81\ud55c \ud574\ud0b9 \uadf8\ub8f9 \ub77c\uc790\ub8e8\uc2a4\uac00 \uc554\ud638\ud654\ud3d0 \ud22c\uc790\uc790\ub97c \ud45c\uc801\uc73c\ub85c \uc0bc\uae30 \uc704\ud574 \uc0ac\ud68c \uacf5\ud559 \uae30\uc220\uacfc \uc0dd\uc131 AI\ub97c \uc0ac\uc6a9\ud55c \uc545\uc131 \ucea0\ud398\uc778\uc744 \uc0ac\uc6a9\ud558\uace0 \uc788\ub2e4.","breadcrumb":{"@id":"https:\/\/cryptonews.com\/kr\/news\/lazarus-hackers-exploit-zero-day-vulnerability-in-chrome-using-fake-nft-games\/#breadcrumb"},"inLanguage":"ko-KR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptonews.com\/kr\/news\/lazarus-hackers-exploit-zero-day-vulnerability-in-chrome-using-fake-nft-games\/"]}],"author":[]},{"@type":"ImageObject","inLanguage":"ko-KR","@id":"https:\/\/cryptonews.com\/kr\/news\/lazarus-hackers-exploit-zero-day-vulnerability-in-chrome-using-fake-nft-games\/#primaryimage","url":"https:\/\/cimg.co\/wp-content\/uploads\/sites\/18\/2024\/10\/24124248\/image-1.jpeg","contentUrl":"https:\/\/cimg.co\/wp-content\/uploads\/sites\/18\/2024\/10\/24124248\/image-1.jpeg","width":1200,"height":686},{"@type":"BreadcrumbList","@id":"https:\/\/cryptonews.com\/kr\/news\/lazarus-hackers-exploit-zero-day-vulnerability-in-chrome-using-fake-nft-games\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptonews.com\/kr\/"},{"@type":"ListItem","position":2,"name":"\ub77c\uc790\ub8e8\uc2a4 \ud574\ucee4, \uac00\uc9dc NFT \uac8c\uc784\uc744 \uc0ac\uc6a9\ud558\uc5ec \ud06c\ub86c\uc758 \uc81c\ub85c\ub370\uc774 \ucde8\uc57d\uc810 \uc545\uc6a9"}]},{"@type":"WebSite","@id":"https:\/\/cryptonews.com\/kr\/#website","url":"https:\/\/cryptonews.com\/kr\/","name":"Cryptonews Korea","description":"","publisher":{"@id":"https:\/\/cryptonews.com\/kr\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptonews.com\/kr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ko-KR"},{"@type":"Organization","@id":"https:\/\/cryptonews.com\/kr\/#organization","name":"Cryptonews Korea","url":"https:\/\/cryptonews.com\/kr\/","logo":{"@type":"ImageObject","inLanguage":"ko-KR","@id":"https:\/\/cryptonews.com\/kr\/#\/schema\/logo\/image\/","url":"https:\/\/cryptonews.com\/wp-content\/uploads\/sites\/18\/2023\/09\/4.jpg","contentUrl":"https:\/\/cryptonews.com\/wp-content\/uploads\/sites\/18\/2023\/09\/4.jpg","width":1669,"height":874,"caption":"Cryptonews Korea"},"image":{"@id":"https:\/\/cryptonews.com\/kr\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/cryptonews.com\/kr\/wp-json\/wp\/v2\/posts\/187255","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptonews.com\/kr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptonews.com\/kr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptonews.com\/kr\/wp-json\/wp\/v2\/users\/254"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptonews.com\/kr\/wp-json\/wp\/v2\/comments?post=187255"}],"version-history":[{"count":2,"href":"https:\/\/cryptonews.com\/kr\/wp-json\/wp\/v2\/posts\/187255\/revisions"}],"predecessor-version":[{"id":187261,"href":"https:\/\/cryptonews.com\/kr\/wp-json\/wp\/v2\/posts\/187255\/revisions\/187261"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptonews.com\/kr\/wp-json\/wp\/v2\/media\/187256"}],"wp:attachment":[{"href":"https:\/\/cryptonews.com\/kr\/wp-json\/wp\/v2\/media?parent=187255"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptonews.com\/kr\/wp-json\/wp\/v2\/categories?post=187255"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptonews.com\/kr\/wp-json\/wp\/v2\/tags?post=187255"},{"taxonomy":"editors","embeddable":true,"href":"https:\/\/cryptonews.com\/kr\/wp-json\/wp\/v2\/editors?post=187255"},{"taxonomy":"sponsored_companies","embeddable":true,"href":"https:\/\/cryptonews.com\/kr\/wp-json\/wp\/v2\/sponsored_companies?post=187255"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}