Question 1

JINX-0164란 무엇인가요?

Accepted Answer

JINX-0164 is a financially motivated threat actor identified by Wiz that has been active since at least mid-2025. The group targets cryptocurrency organizations through social engineering on LinkedIn, custom macOS malware, and attacks on CI/CD development infrastructure.

Question 2

JINX-0164 공격은 어떻게 시작되나요?

Accepted Answer

The attackers contact developers on LinkedIn using credible profiles, propose a virtual meeting, and send a link to a malicious domain that mimics a legitimate conferencing platform. When the victim runs the fake meeting client, it delivers macOS malware called AUDIOFIX.

Question 3

크립토 개발자가 침해를 의심할 경우 무엇을 해야 하나요?

Accepted Answer

Developers should rotate GitHub tokens, SSH keys, cloud credentials, and any cryptocurrency wallet keys. Audit CI/CD pipelines for unauthorized activity, check repositories for unverified commits, and review the indicators of compromise published in the Wiz research report.

MINIRAT

암호화폐 개발자들이 가짜 LinkedIn 통화에 속아 코드 파이프라인 통제권을 잃다

날카로운 한 줄.
매일.

MINIRAT

암호화폐 개발자들이 가짜 LinkedIn 통화에 속아 코드 파이프라인 통제권을 잃다

날카로운 한 줄.매일.

날카로운 한 줄.
매일.