News

NimDoor crypto-theft macOS malware revives itself when killed

  • Bill Toulas--BleepingComputer
  • published date: 2025-07-02 19:36:27 UTC

North Korean state-backed hackers have been using a new family of macOS malware called NimDoor in a campaign that targets web3 and cryptocurrency organizations. [...]

North Korean state-backed hackers have been using a new family of macOS malware called NimDoor in a campaign that targets web3 and cryptocurrency organizations. Researchers analyzing the payloads di… [+4047 chars]