Targeting of cryptocurrency start-ups · Jan 2022
BlueNoroff, an offshoot of the North Korean threat actor Lazarus Group, mounted a long-running campaign against cryptocurrency firms and exchanges in a bid to steal cryptocurrency.
Snatchcrypto Campaign · January
Annex 76: List of DPRK cyberthreat actors' malicious activities in 2022 monitored by the Panel. RGB Unit: BlueNoroff; Case Name: Snatchcrypto Campaign; SPH √; VAS √; VAS Value: N/A; Publicized Month: January. (SPH Significant Phishing, KAC knowledge acquisition and espionage, VAS virtual asset seizures)
17th January– Threat Intelligence Report · 2022-01-17
North Korean BlueNoroff group has been targeting cryptocurrency businesses, which led to serious financial losses. The threat actors try to manipulate their targets by pretending to be a venture capital firm and send them a fake contract or documents containing a backdoor with surveillance capabilities.
Cryptocurrency startups · 13/01/2022
Researchers from Kaspersky discover SnatchCrypto, the latest campaign of the North Korean threat actor group known as 'BlueNoroff' targeting cryptocurrency startups with malicious documents and fake MetaMask browser extensions. [Date Occurred: During November 2021; Date Discovered: During November 2021]
The BlueNoroff cryptocurrency hunt is still on · 2022-01-13T09:00:23
It appears that BlueNoroff shifted focus from hitting banks and SWIFT-connected servers to solely cryptocurrency businesses as the main source of the group’s illegal income.