Over the time threat and malware experts warns the users and companies about the newly evolving type of scam processes; most recently a threat analyst with Silent Push noted in a report published on April 24, 2025 that a group of bad actor associated with Lazarus Group of North Korea has set up three shell firm to disturb malware to unsuspecting cryptocurrency job seekers.
The report has identified three shell companies, named as BlockNovas LLC, Angeloper Agency and SoftGlide LLC from which two of them are legally registered in the United States.
Also the analysts have confirmed three different strains, BeaverTail, InvisibleFerret and OtterCookies are primarily leveraged to distribute malware through “interview malware lure.”
North Korean hackers are hitting crypto hard
The identified group using shell companies is a subgroup of the Lazarus Group of North Korea, and in the identified scam type, bad actors are “ heavily using Github, job listing, and freelancer websites.”
“During the job application process, an error message is displayed as someone tries to record an introduction video. The solution is an easy click fix, copy and paste trick, which leads to malware if the unsuspecting developer completes the process,” the report said.
A LinkedIn account under the name of Blocknovas is reportedly the account held by BlockNovas LLC and it has 488 followers and has 8 associated employees over the platform.
According to the Official website of BlockNovas LLC it is a company, “ mainly focused on Blockchain technologies while participating in other trending industrial categories like AI, Web, Mobile.”
Senior threats analyst with SilentPush wrote in a X post dated April 25, 2025, “ Yesterday, the Federal Bureau of Investigation (FBI) acquired the Blocknovas domain, but Softglide is still live, along with some of their other infrastructure.”
In the same X threat, Zach Edwards quotes, “ Contagious Interview is using a new tool – at least some of the AI image modification work is being done with ‘Remaker AI’ – a niche AI tool for creating image variations.”
And a LinkedIn account with the username ‘ Angeloper Agency’ has 23 followers and it’s website claims it as a “ A young and ambitious startup – Angeloper LLC is on a mission to revolutionize SMEs using AI, Blockchain, trending web2 technology and we are driven by innovation, creativity, and excellence.”
Source: Angeloper website
Hacks and similar incidents have grown at a rapid pace and are constantly growing. To tackle such issues there is a need for well structured guidelines, with a strict set of rules which can trouble these digital and cyber criminals.
Crypto market price updates
When writing the crypto market cap was $2.94 trillion with a surge of 2.13% in the past 24 hours, and at the same time crypto fear and greed index was at 52 indicating naturality in the market sentiments.
According to the data from CoinMarketCap the intraday gainer’s list has been ruled by Stacks, Sui, Bitcoin SV, Helium, Ondo, Bonk and The Graph.
