{"id":676313,"date":"2025-06-20T07:00:36","date_gmt":"2025-06-20T04:00:36","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/north-korea-targets-crypto-workers-with-new-info-stealing-malware\/"},"modified":"2025-06-20T07:00:36","modified_gmt":"2025-06-20T04:00:36","slug":"north-korea-targets-crypto-workers-with-new-info-stealing-malware","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/north-korea-targets-crypto-workers-with-new-info-stealing-malware\/","title":{"rendered":"North Korea targets crypto workers with new info-stealing malware"},"content":{"rendered":"<p style=\"float:right;margin:0 0 10px 15px;width:240px\">\n                        <img decoding=\"async\" src=\"https:\/\/images.cointelegraph.com\/images\/840_aHR0cHM6Ly9zMy5jb2ludGVsZWdyYXBoLmNvbS91cGxvYWRzLzIwMjQtMTEvMDE5MzBjYmEtMWU0Mi03NmRmLWI5YTktZWNiNmI1ZmNiYjhi.jpg\" class=\"type:primaryImage\">\n                    <\/p>\n<p>North Korean threat actors have been deploying malware through fake crypto job sites, targeting blockchain professionals to steal wallet credentials, Cisco Talos says.<\/p>\n<p><p>A North Korean-aligned threat actor has been targeting job seekers in the crypto industry with new malware that is designed to steal passwords for crypto wallets and password managers.<\/p>\n<p>Cisco Talos <a rel=\"nofollow\" target=\"_blank\" data-ct-non-breakable=\"null\" href=\"https:\/\/blog.talosintelligence.com\/python-version-of-golangghost-rat\/\" rel=\"noopener nofollow\" target=\"_blank\" title=\"null\">reported<\/a> on Wednesday that it found a new Python-based remote access trojan (RAT) it called \u201cPylangGhost,\u201d linking the malware to a North Korean-affiliated hacking collective called \u201cFamous Chollima,\u201d also known as \u201cWagemole.\u201d<\/p>\n<p>The hacking group has been targeting job seekers and employees with cryptocurrency and blockchain experience, primarily in India, with the attacks carried out through fake job interview campaigns using <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/social-mediaa\/\" data-internallinksmanager029f6b8e52c=\"1\" title=\"Social Media\" target=\"_blank\" rel=\"noopener\">social<\/a> engineering.<\/p>\n<p>Read more<\/p>\n<\/p>\n<blockquote><p><strong><span style=\"color: #ff6600;\">If you liked the article, do not forget to share it with your friends. Follow us on\u00a0<span style=\"color: #ff0000;\"><a style=\"color: #ff0000;\" href=\"https:\/\/news.google.com\/publications\/CAAqBwgKMN63nwsw68G3Aw\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Google News<\/a><\/span>\u00a0too, click on the star and choose us from your favorites.<\/span><\/strong><\/p><\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\"><strong>If you want to read more <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/news\/\" data-internallinksmanager029f6b8e52c=\"2\" title=\"News\" target=\"_blank\" rel=\"noopener\">News<\/a> articles, you can visit our <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/en.buradabiliyorum.com\/category\/general\/\" target=\"_blank\" >General category.<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n<p><span style=\"color: black;\"><a style=\"color: #ff9900;\" href=\"https:\/\/cointelegraph.com\/news\/north-korea-targets-crypto-job-seekers-to-plant-password-jacking-malware?utm_source=rss_feed&#038;utm_medium=feed%3Fr%3Du08y0pzlotq%26sid%3Dd6f411bdac740d0e%26_nocache%3D1750391936381%26_t%3D1750391936381&#038;utm_campaign=rss_partner_inbound\" target=\"_blank\" >Source<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>North Korean threat actors have been deploying malware through fake crypto job sites, targeting blockchain professionals to steal wallet credentials, Cisco Talos says. A North Korean-aligned threat actor has been targeting job seekers in the crypto industry with new malware that is designed to steal passwords for crypto wallets and password managers. Cisco Talos reported&#8230;<\/p>\n","protected":false},"author":1,"featured_media":676314,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/images.cointelegraph.com\/cdn-cgi\/image\/format=auto,onerror=redirect,quality=90,width=1200\/https:\/\/s3.cointelegraph.com\/uploads\/2024-11\/01930cba-1e42-76df-b9a9-ecb6b5fcbb8b","fifu_image_alt":"","footnotes":""},"categories":[1],"tags":[75857,117,70944,27926],"class_list":["post-676313","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-general","tag-malware","tag-business","tag-hackers","tag-north-korea"],"_links":{"self":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/676313","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/comments?post=676313"}],"version-history":[{"count":0,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/676313\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media\/676314"}],"wp:attachment":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media?parent=676313"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/categories?post=676313"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/tags?post=676313"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}