Nozomi Networks cybersecurity experts: The malware is downloaded via Pay-Per-Install networks – online ad campaigns that prompt software in infected installers or software cracks.
Volexity cybersecurity experts: The North Korea’s APT uses a fake trading website, that mimic a legit one, and DLL Side-loading to distribute the malware.
The North Korea’s APT uses spear phishing emails to cryptocurrency firm employees that mimic recruitments for high-paying jobs: Goal: to download the malware.
Technology Review: I’t confirmed by the recent “51%” cyber attacks, last one against Ethereum Classic, and by the cyber security weaknesses in the smart-contracts.