25/10/2024 Lazarus Group exploited Chrome vulnerability with fake NFT game

The North Koreans invested great effort in creating and promoting a game that apparently drained users’ wallets.

Lazarus Group exploited Chrome vulnerability with fake NFT game

The North Koreans invested great effort in creating and promoting a game that apparently drained users’ wallets.

The North Korean Lazarus Group of hackers used a fake blockchain-based game to exploit a zero-day vulnerability in Google’s Chrome browser and install spyware that stole wallet credentials. Kaspersky Labs analysts noticed the exploit in May and reported it to Google, which has fixed it.

Play at a big risk

The hacker’s play-to-earn multiplayer online battle arena game was fully playable and had been promoted on LinkedIn and X. The game was called DeTankZone or DeTankWar and used non-fungible tokens (NFTs) as tanks in a worldwide competition.

Users were infected from the website, even if they did not download the game. The hackers modeled the game on the existing DeFiTankLand.

The hackersusedmalware called Manuscrypt followed by a previously unknown “type confusion bug in the V8 JavaScript engine.” It was the seventh zero-day vulnerability found in Chrome in 2024 through mid-May.

Kaspersky principal security expert Boris Larin said:

“The significant effort invested in this campaign suggests they had ambitious plans, and the actual impact could be much broader, potentially affecting users and businesses worldwide.”

The fake game wasnoticedby Microsoft Security in February, though the hackers removed the exploit from the website before Kaspersky could analyze it. The lab informed Google of it anyway and Google fixed the vulnerability in Chrome before the hackers could use it again.

Screenshot from Lazarus Group’s fake game. Source:SecureList

North Korea loves crypto

Zero-day vulnerabilities take the vendor by surprise and there is no ready patch for them. It took Google 12 days to patch the vulnerability in question.

Another North Korean hacker group harnessed a different zero-day vulnerability in Chrome to target crypto holders earlier this year.

Source:Microsoft Threat Intelligence

Lazarus Group is fond of crypto. Between 2020 and 2023, itlaundered over $200 millionin crypto from 25 hacks, according to crypto crime watcher ZachXBT.

The United States Treasury Department also alleged Lazarus Groupto be behind the attack onRonin Bridge that netted crypto worth over $600 million in 2022.

US cybersecurity firm Recorded Future found that North Korean hackers as a wholestole over $3 billion in crypto between 2017 and 2023.

Arts

https://cointelegraph.com/news/north-korean-lazarus-group-chrome-zero-day-nft-game-hack

Interesting NFTs
YouTube Lab
YouTube logo factory. 10-second loop, 30 fps. Created using Cinema4D, X-Particles, TurbulenceFD, Octane, and After Effects.
Crossroad
LIMITED EDITION 1/1 | includes signed limited edition prints of all 3 states (pre-election, Trump win, Biden win) This piece is a first for Nifty, a token that will change based on the outcome of the election. If anything is constant about the times we now live in, it's uncertainty. This uncertainty is perfectly encapsulated in this piece of artwork as the person buying the piece will not know the final artwork. The artwork will be one state at auction before the election, and after the results of the election are known, will forever change to reflect a Trump or Biden win. PLEASE FUCKING NOTE: If trump wins, this token will change to that video of sexy boi king trump stomping through hell FOREVER. I don’t want you coming back to me bitching that you spent $2M* on this and now it’s a video of orangeman going HAM and it’s keeping u up at night popping mad boners. should have voted bruh. *and stfu that this isn’t gonna be worth a fuckton more when I hit 30 years of everydays and have a permanent collection in the MOMA. smh.
Selina
Sup playa! My name's Selina. I once peed on Princess Diana's cat. They had it coming. My great-great-great-great-great-great grandkitty lived with Princess Diana. Will you be the marmalade to my pickles?
Gangnam Wanted Poster #5/25
3L-84574RD, One of the most dangerous robot in Cryptovoxel, last seen in Gangnam near the Rose Nexus. Reward 99000credits battery full or empty. Help us find him, share this!
#67002
By OthersideDeployer