Question 1

¿Qué es JINX-0164?

Accepted Answer

JINX-0164 is a financially motivated threat actor identified by Wiz that has been active since at least mid-2025. The group targets cryptocurrency organizations through social engineering on LinkedIn, custom macOS malware, and attacks on CI/CD development infrastructure.

Question 2

¿Cómo comienza el ataque de JINX-0164?

Accepted Answer

The attackers contact developers on LinkedIn using credible profiles, propose a virtual meeting, and send a link to a malicious domain that mimics a legitimate conferencing platform. When the victim runs the fake meeting client, it delivers macOS malware called AUDIOFIX.

Question 3

¿Qué deben hacer los desarrolladores de cripto si sospechan de una compromiso?

Accepted Answer

Developers should rotate GitHub tokens, SSH keys, cloud credentials, and any cryptocurrency wallet keys. Audit CI/CD pipelines for unauthorized activity, check repositories for unverified commits, and review the indicators of compromise published in the Wiz research report.

MINIRAT

Los desarrolladores de criptomonedas caen en llamadas falsas de LinkedIn y pierden el control de los pipelines de código

Un breve y afilado resumen.
Todos los días.

MINIRAT

Los desarrolladores de criptomonedas caen en llamadas falsas de LinkedIn y pierden el control de los pipelines de código

Un breve y afilado resumen.Todos los días.

Un breve y afilado resumen.
Todos los días.