Targeting of cryptocurrency company employees · Apr 2022
North Korean hackers targeted cryptocurrency company employees in a phishing campaign to access systems and make fraudulent trades. Lazarus sent mass emails with job offers embedded with malicious links. When victims clicked, their devices downloaded TraderTraitor malware, which enabled the hackers to execute commands and infiltrate company networks to make fraudulent blockchain transactions.
25th April – Threat Intelligence Report · 2022-04-25
CISA, the FBI and the US Treasury Department alert on the North Korean APT group Lazarus targeting companies in the blockchain and cryptocurrency sectors, using social engineering on employees.
Organizations in the cryptocurrency and blockchain industries · 18/04/2022
CISA, the FBI, and the US Treasury Department issues a warning about TraderTraitor, a campaign carried out by the North Korean Lazarus group, targeting organizations in the cryptocurrency and blockchain industries with trojanized cryptocurrency applications. [Date Occurred: -; Date Discovered: -]
米政府、北朝鮮関連グループの攻撃に注意喚起 - 標的は暗号通貨やNFT関連 · 2022-04-20
attribution sentence(s): 米政府、北朝鮮関連グループの攻撃に注意喚起 - 標的は暗号通貨やNFT関連 | 北朝鮮の支援を受ける攻撃グループが、「暗号資産（仮想通貨）」や「NFT」などブロックチェーン技術を扱う企業や資産を保有する個人を対象に攻撃を展開しているとして、米政府が注意喚起を行った。 | 米連邦捜査局（FBI）や米サイバーセキュリティインフラストラクチャセキュリティ庁（CISA）、米財務省が、「Lazarus Group」「APT38」「BlueNoroff」「Stardust Chollima」といった名称で知られる攻撃グループが2020年以降に展開する攻撃活動について共同で注意喚起を行ったもの。