> TritonInfoSec News
Home / Jul 26, 2026 / Story
0
#4 The Hacker News general July 24, 2026 at 15:12 UTC

BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery

By [email protected] (The Hacker News)

AI Summary

North Korean threat group BlueNoroff has operationalized a phishing kit that impersonates Zoom and Microsoft Teams via typosquatted domains, profiling cryptocurrency wallet contents before selectively deploying malware. The kit combines compromised industry contacts with social engineering to abuse trust relationships, targeting crypto wallet holders with tailored payloads. This represents a significant operational maturity step for BlueNoroff beyond standard ClickFix-style lure campaigns.

Read full article → https://thehackernews.com/2026/07/bluenoroff-zoom-…

Relevance score: 83.0/100

# More from July 26

  1. 1
    Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available The Hacker News
  2. 2
    Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE The Hacker News
  3. 3
    Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git The Hacker News
  4. 5
    Default Azure Automation Setting Enables Cross-Tenant Identity Takeover Dark Reading
  5. 6
    Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable The Hacker News
  6. 7
    Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts BleepingComputer
  7. 8
    Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks The Hacker News
  8. 9
    Golden Chickens Resurfaces With Four New Malware Families and Modular Implants The Hacker News
  9. 10
    Hermes AI agent used to automate attack on Thai Finance Ministry BleepingComputer