North Korean hackers target job seekers in the cryptocurrency sector in India

Cisco Talos reported that a North Korean hacker group called 'Famous Chollima' has focused its attacks on job seekers in the cryptocurrency sector in India. This group apparently has no direct ties to Lazarus.

At this point, it is difficult to determine whether these actions were minor thefts or preliminary preparations for larger scale attacks. Job seekers in the crypto industry should exercise caution going forward. The North Korean group Lazarus has an impressive reputation in the field of cryptocurrency crimes, having carried out the largest hacking attack in the history of the industry. However, it is not the only criminal organization in the Web3 space in North Korea, as it is widely represented in DeFi.

According to reports, Famous Chollima is not a new organization; it has been active since mid-2024 or even earlier. In several recent incidents, North Korean hackers attempted to infiltrate American cryptocurrency companies, such as Kraken, by applying for open positions.