CryptoCore (9)
Events whose actors field, as written by the source, names this.
| Date (as written) | Incident | Country | Actors |
|---|---|---|---|
| 2024-03-13 | NFPrompt | ||
| 2024-10-31 | M2 | ||
| 2024-07-15 | Irys | CryptoCore | |
| Throughout 2024 | CryptoCore fake-recruiter campaign contacting over 1,200 cryptocurrency company employees (Slack skill assessment tests) | over a dozen countries | CryptoCore |
| fall 2024 | Fake videoconferencing troubleshooting spear phishing campaign (AppleScripts) | CryptoCore | |
| early 2025 | Takeover of the email account of an India-based cryptocurrency gaming company’s CEO; spear phishing of over 250 individuals | India | CryptoCore |
| February 2025 (OpenAI report); 2025 (DeepSeek) | Use of OpenAI tools, ChatGPT and DeepSeek | CryptoCore; TraderTraitor | |
| March and April 2025 | Registration of fake video conferencing domains for spear phishing (e.g. web001-zoom.us, zoomsdk.us, secure-meeting.cloud) | CryptoCore | |
| Malicious NPM packages for skill assessment tests (e.g. “myetherpackage,” “cryptooooo,” “libcrypt-test”) | CryptoCore, in addition to other DPRK actor groups |