Pulse Detail — Threat Intelligence

PULSE NAME

RustDoor and Koi Stealer for macOS Used by North Korea-Linked Threat Actor to Target the Cryptocurrency Sector

WHITE Tr1sa111 2025-02-27 Modified: 2025-03-28

IOCs

MEDIUM VOLUME

MITRE ATT&CK & Malware Families

ATT&CK TECHNIQUES

MALWARE FAMILIES

Koi Stealer

Indicators of Compromise (2 / 25 total)

All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain

TYPE	INDICATOR	DESCRIPTION	CREATED
URL	https://apple-ads-metric.com	—	2025-02-27
URL	https://visualstudiomacupdate.com	—	2025-02-27

References (1)