North Korean hackers infiltrated systems at 1,640 companies across 57 countries by posing as job candidates in the crypto sector. Between 700 and 800 of these companies suffered serious intrusions, with attackers gaining extensive access to servers, cloud infrastructure and developer credentials. The attackers used AI-generated profiles, fake CVs and malware such as OtterCookie and InvisibleFerret. Two shell companies, Softglide LLC and Blocknovas LLC, were registered in the United States to facilitate these infiltrations. The primary objective was to steal crypto wallet keys and blockchain infrastructure, confirming a trend that now significantly funds the Pyongyang regime.
Source: Read the original article
