Companies 'invited specialists from the industry to work' in order to gain access to their personal data
North Korean hackers linked to the Lazarus group registered fake companies in the USA to distribute malware among developers of cryptocurrency projects.
According to the report, the attackers created at least two companies with official American registration and used them as a cover. They sent job offers to developers on behalf of these companies and simulated interviews.
Fake employee profiles of companies were generated using AI, and blogs and social media pages were created for them.
The goal was to gain access to cryptocurrency wallets and developer credentials, followed by attacks on the companies' infrastructure.
It was precisely the tactic of fake job offers that led to the hacking of the Ronin bridge in 2022, when $625 million was withdrawn from the Axie Infinity game in $ETH and $USDC . According to the UN and Chainalysis, groups linked to North Korea have stolen over $3 billion in cryptocurrencies over five years.
#CryptoAdoption #BinanceAlphaAlert #MarketRebound #HackerAlert
