North Korean hackers are targeting South Korean encryption companies with malware called Durian

On May 9th, North Korean hacker group Kimsuky launched a series of targeted attacks on at least two cryptocurrency companies using a new malicious software named Durian. The attacks were carried out by exploiting legitimate security software used by a South Korean encryption company. According to Kaspersky, Durian has comprehensive backdoor capabilities, allowing it to execute commands, download additional files, and leak files.