Connect with us

News

Lazarus new malware can now bypass detection

North Korean hacking collective Lazarus Group has been using a new type of malware as part of its fake employment scams which researchers warn is far more challenging to detect than its predecessor.

Published

on

North Korean hacking collective Lazarus Group has been using a new type of malware as part of its fake employment scams which researchers warn is far more challenging to detect than its predecessor.

ESET’s senior malware researcher Peter Kálnai, while analyzing a recent fake job attack against a Spain-based aerospace firm, ESET researchers discovered a publicly undocumented backdoor named LightlessCan.

The Lazarus Group’s fake job scam typically involves tricking victims with a potential offer of employment at a well-known firm. The attackers would entice victims to download a malicious payload masqueraded as documents to do all sorts of damage.

However, Kálnai says the new LightlessCan payload is a “significant advancement” compared to its predecessor BlindingCan.

LightlessCan mimics the functionalities of a wide range of native Windows commands, enabling discreet execution within the RAT itself instead of noisy console executions.

“This approach offers a significant advantage in terms of stealthiness, both in evading real-time monitoring solutions like EDRs, and postmortem digital forensic tools,” he said.

The new payload also uses what the researcher calls “execution guardrails” — ensuring that the payload can only be decrypted on the intended victim’s machine, thereby avoiding unintended decryption by security researchers.

Kálnai said that one case that involved the new malware came from an attack on a Spanish aerospace firm when an employee received a message from a fake Meta recruiter named Steve Dawson in 2022.

Soon after, the hackers sent over the two simple coding challenges embedded with the malware. Cyberespionage was the main motivation behind Lazarus Group’s attack on the Spain-based aerospace firm

Business

Celo, Chainlink, Hyperlane launch crosschain USDT on OP Superchain

Published

on

Celo, Chainlink, Hyperlane, and Velodrome have introduced a cross-chain version of Tether’s USDT on the OP Superchain. The newly launched “Super USDT” is backed by reserves locked on Celo and utilizes Chainlink’s Cross-Chain Interoperability Protocol and Hyperlane for seamless movement across networks. This innovation aims to enhance liquidity and reduce the fragmentation of stablecoins across the ecosystem.

The initiative aligns with Optimism’s goal of creating a unified, interoperable Superchain. Unlike traditional bridged USDT, which struggles with compatibility, Super USDT is designed to integrate with upcoming interchain standards and future native USDT upgrades. This is expected to simplify stablecoin transactions and increase adoption within the Superchain framework.

Chainlink’s business officer, Johann Eid, emphasized the significance of this development, noting that Chainlink’s Data Feeds have already secured billions in USDT lending markets. With the introduction of Super USDT, users will have greater flexibility in utilizing the stablecoin across multiple Optimism-based chains.

Tether’s USDT remains the dominant stablecoin, accounting for over 61% of the $231 billion stablecoin market. With stablecoin adoption surpassing Visa and Mastercard’s transaction volumes, interoperability solutions like Super USDT are becoming increasingly critical for ensuring seamless and efficient digital asset transfers. Read more.

Continue Reading

Business

SEC Enforcement Division closes investigation into Robinhood Crypto

Published

on

The U.S. Securities and Exchange Commission (SEC) has closed its investigation into Robinhood Crypto, informing the company on February 21 that no enforcement action would be recommended. This decision comes less than a year after Robinhood received a Wells notice regarding potential securities violations.

Robinhood Markets’ compliance officer, Dan Gallagher, criticized the investigation, stating that the company has always adhered to federal securities laws. The SEC had been examining Robinhood’s crypto operations since issuing the Wells notice in May 2024, which suggested possible enforcement action.

In January 2025, Robinhood reached a $45 million settlement with the SEC over multiple securities law violations. The company admitted to some findings in the SEC’s order but has since urged regulators to move away from a “regulation by enforcement” approach.

This development reflects a broader shift in the SEC’s stance on crypto regulation, with growing calls for clearer guidelines. Some experts speculate that pending enforcement actions against other major crypto firms could also be reconsidered. Read more.

Continue Reading

Business

Hong Kong investment firm’s board gives nod to more Bitcoin buying

Published

on

HK Asia Holdings Limited has expanded its Bitcoin holdings to nearly 9 BTC, following board approval for additional purchases. The Hong Kong-based investment firm acquired approximately 7.88 BTC on February 20, spending around $761,705. This comes after its initial 1 BTC purchase a week earlier, which significantly boosted its stock price.

The company financed its Bitcoin acquisition using internal resources, bringing its total investment in the asset to roughly $861,500. The firm emphasized its growing interest in digital assets amid increasing cryptocurrency adoption in the business world.

Following the Bitcoin purchases, HK Asia’s stock price surged by nearly 93% after its first acquisition and continued to rise by 5.7% on February 24. If the trend holds, the stock could surpass its all-time high from June 2019, reflecting strong investor confidence in the firm’s crypto strategy.

HK Asia voluntarily disclosed its Bitcoin acquisitions, even though they remained below the legal threshold requiring disclosure. This move aligns with a broader trend of publicly traded firms incorporating cryptocurrency into their asset holdings.

Continue Reading

Trending

Copyright © 2025 cryptonews.lk