Question 1

Was ist JINX-0164?

Accepted Answer

JINX-0164 is a financially motivated threat actor identified by Wiz that has been active since at least mid-2025. The group targets cryptocurrency organizations through social engineering on LinkedIn, custom macOS malware, and attacks on CI/CD development infrastructure.

Question 2

Wie beginnt der JINX-0164-Angriff?

Accepted Answer

The attackers contact developers on LinkedIn using credible profiles, propose a virtual meeting, and send a link to a malicious domain that mimics a legitimate conferencing platform. When the victim runs the fake meeting client, it delivers macOS malware called AUDIOFIX.

Question 3

Was sollten Crypto-Entwickler tun, wenn sie einen Kompromittierungsverdacht haben?

Accepted Answer

Developers should rotate GitHub tokens, SSH keys, cloud credentials, and any cryptocurrency wallet keys. Audit CI/CD pipelines for unauthorized activity, check repositories for unverified commits, and review the indicators of compromise published in the Wiz research report.

MINIRAT

Crypto-Entwickler fallen auf gefälschte LinkedIn-Anrufe herein, verlieren die Kontrolle über Code-Pipelines

Ein scharfer, knapper Brief.
Jeden Tag.

MINIRAT

Crypto-Entwickler fallen auf gefälschte LinkedIn-Anrufe herein, verlieren die Kontrolle über Code-Pipelines

Ein scharfer, knapper Brief.Jeden Tag.

Ein scharfer, knapper Brief.
Jeden Tag.