DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Graphalgo fake recruiter malware campaign respawned

Date (as written)
2026-04-09T15:00:00.000Z
Year
2026
Actors (as written)
North Korean state-sponsored threat actors
Actor pages
North Korean state-sponsored threat actors
Tags (as written)
crypto developers

Source entries (1)

ReversingLabs blog

Graphalgo fake recruiter malware campaign respawned · 2026-04-09T15:00:00.000Z
An attack targeting crypto developers has been respawned — with an LLC and new techniques. ... The reuse of the same final payload and release artifacts as the initial graphalgo campaign, along with timestamps that align with North Korean time zones further support the prior attribution to the state-sponsored threat actors.
https://www.reversinglabs.com/blog/graphalgo-campaign-respawned

Suggest a correction on GitHub