A hacking group linked to North Korea has been found distributing malware targeting Apple computers running the macOS operating system, Voice of America (VOA) reported today (August 1).

In a recent report, U.S. cybersecurity firm Allsecure analyzed that North Korean hackers use a method of luring users to fake web pages and tricking them into installing malware under the guise of a computer operating system update.

For example, when a user clicks on an advertisement related to a specific company on a search engine, a fake page opens, displaying a screen that makes it appear as though the Mac operating system has rebooted or frozen.

Helpful error-fixing instructions are then provided, but following these instructions actually leads users to manually input the hackers' malware into their system.

The hackers' ultimate goal is cryptocurrency theft.

Once the attack succeeds, a program is installed that steals information from 157 cryptocurrency wallets as well as data saved in major internet browsers such as Chrome and Firefox.

Furthermore, a malicious browser extension disguised as "Google Drive Offline" is installed simultaneously, performing functions that directly drain the victim's cryptocurrency wallets.

Allsecure noted in its report that this "shows (North Korean attacks) are appearing even in general web search environments," pointing out that the scope of the threat has expanded beyond traditional methods.

(Photo: Yonhap News)