Crypto wasted: BlueNoroff’s ghost mirage of funding and jobs

BlueNoroff, a financially motivated threat actor, has been conducting two sophisticated campaigns dubbed GhostCall and GhostHire. GhostCall targets macOS devices of tech executives and venture capitalists through fake Zoom-like meetings, while GhostHire targets Web3 developers through fake recruitment processes. Both campaigns utilize various malware chains, including ZoomClutch, DownTroy, CosmicDoor, RooTroy, and SilentSiphon. The attacks involve social engineering, AI-enhanced images, and multi-stage malware deployment across Windows, macOS, and Linux systems. BlueNoroff has expanded its focus beyond cryptocurrency theft to comprehensive data acquisition, enabling supply chain attacks and leveraging established trust relationships for broader impact.

Pulse ID: 69003b85c217870cc5794cc6
Pulse Link: https://otx.alienvault.com/pulse/69003b85c217870cc5794cc6
Pulse Author: AlienVault
Created: 2025-10-28 03:41:57

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BlueNoroff #CyberSecurity #InfoSec #Linux #Mac #MacOS #Malware #OTX #OpenThreatExchange #Rust #SocialEngineering #SupplyChain #Web3 #Windows #Zoom #bot #cryptocurrency #developers #AlienVault

Crypto wasted: BlueNoroff’s ghost mirage of funding and jobs

BlueNoroff, a financially motivated threat actor, has been conducting two sophisticated campaigns dubbed GhostCall and GhostHire. GhostCall targets macOS devices of tech executives and venture capitalists through fake Zoom-like meetings, while GhostHire targets Web3 developers through fake recruitment processes. Both campaigns utilize various malware chains, including ZoomClutch, DownTroy, CosmicDoor, RooTroy, and SilentSiphon. The attacks involve social engineering, AI-enhanced images, and multi-stage malware deployment across Windows, macOS, and Linux systems. BlueNoroff has expanded its focus beyond cryptocurrency theft to comprehensive data acquisition, enabling supply chain attacks and leveraging established trust relationships for broader impact.

Pulse ID: 69003b85c217870cc5794cc6
Pulse Link: https://otx.alienvault.com/pulse/69003b85c217870cc5794cc6
Pulse Author: AlienVault
Created: 2025-10-28 03:41:57

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BlueNoroff #CyberSecurity #InfoSec #Linux #Mac #MacOS #Malware #OTX #OpenThreatExchange #Rust #SocialEngineering #SupplyChain #Web3 #Windows #Zoom #bot #cryptocurrency #developers #AlienVault

WHAT bugs?

Seriously, what was going wrong that this "update" fixes... because experience teaches pretty well that new update also means NEW BUGS.

Apart from anything, it's frankly disrespectful to the user that you can't take the time to detail what you fixed in the faulty product you supplied to them, for their non-faulty money.

#iOS #Mac #macOS #Apple #Developers

WHAT bugs?

Seriously, what was going wrong that this "update" fixes... because experience teaches pretty well that new update also means NEW BUGS.

Apart from anything, it's frankly disrespectful to the user that you can't take the time to detail what you fixed in the faulty product you supplied to them, for their non-faulty money.

#iOS #Mac #macOS #Apple #Developers

#Apple loses #UK lawsuit over #app store commissions

Apple on Thursday lost a London lawsuit accusing the US #tech company of abusing its dominant position by charging app #developers an unfair 30% commission through its app store.

https://www.reuters.com/world/apple-loses-uk-lawsuit-over-app-store-commissions-2025-10-23/?utm_source=braze&utm_medium=notifications&utm_campaign=2025_engagement

#Apple loses #UK lawsuit over #app store commissions

Apple on Thursday lost a London lawsuit accusing the US #tech company of abusing its dominant position by charging app #developers an unfair 30% commission through its app store.

https://www.reuters.com/world/apple-loses-uk-lawsuit-over-app-store-commissions-2025-10-23/?utm_source=braze&utm_medium=notifications&utm_campaign=2025_engagement

This wasn't mentioned yesterday, because I thought it was implied, but this work being done under the #NLNet aegis, the completion of any of the milestones I have planned will bring a monetary remuneration.

https://metalhead.club/@mariusor/115419289501218604

#go #golang #ActivityPub #developers

This wasn't mentioned yesterday, because I thought it was implied, but this work being done under the #NLNet aegis, the completion of any of the milestones I have planned will bring a monetary remuneration.

https://metalhead.club/@mariusor/115419289501218604

#go #golang #ActivityPub #developers

On this topic, calling all #Go #developers interested in lending a hand.

I have two major goals for increasing the unit-test coverage in the individual packages that #GoActivityPub is comprised of.

These are tasks that are very accessible even for people new to the #ActivityPub spec and I would prefer to support new developers that want to give it a try than wait until I have time to do them myself.

The only requirement I have is that if you want to help, you already have some public Go projects that I can have a look at.

Point of contact is on this email (after you "deobfuscate" it): goap＠federated·id

#Go #Golang #developers #helpwanted #NLNet #ngi0

On this topic, calling all #Go #developers interested in lending a hand.

I have two major goals for increasing the unit-test coverage in the individual packages that #GoActivityPub is comprised of.

These are tasks that are very accessible even for people new to the #ActivityPub spec and I would prefer to support new developers that want to give it a try than wait until I have time to do them myself.

The only requirement I have is that if you want to help, you already have some public Go projects that I can have a look at.

Point of contact is on this email (after you "deobfuscate" it): goap＠federated·id

#Go #Golang #developers #helpwanted #NLNet #ngi0