According to Foresight News, North Korean hacker group Lazarus has reportedly established two fake companies, Blocknovas LLC in New Mexico and Softglide LLC in New York, to deceive cryptocurrency developers. These companies were used to lure developers with false job offers, allowing the hackers to implant malware and steal cryptocurrency wallets and developer credentials. Silent Push's research has confirmed that a subgroup of the Lazarus Group carried out these attacks. The FBI has since seized the domain associated with Blocknovas.