North Korean ROOFDECK Backdoor Uses Nostr Profiles to Hide Malware C2 Servers

North Korea-linked threat actor TraderTraitor has expanded its macOS malware campaign beyond cryptocurrency firms, targeting an Indian IT services provider through fake job interview projects hosted on GitHub. SentinelOne found that the attackers used two Rust-based macOS backdoors, named FLATROOF and ROOFDECK, previously linked to the April 2026... Weiterlesen