G7 leaders elevated North Korea’s crypto thefts as a global security concern, linking digital asset crime to international security and Indo-Pacific stability. The statement included one direct reference to cryptocurrency thefts, alongside warnings about nuclear and missile programs. G7 Flags North Korea Crypto Theft in Security Statement The leaders of Canada, France, Germany, Italy, Japan, […]
]]>
Ripple will share DPRK-linked threat intelligence with Crypto ISAC to help crypto firms screen applicants, contractors, and vendors. The program covers fraud domains, wallets, and compromise indicators tied to active campaigns. Key Takeaways: Ripple will provide Crypto ISAC members intelligence on DPRK-linked fraud domains, wallets, and campaigns. Security teams can use enriched identity signals to […]
]]>
North Korea’s Lazarus Group has deployed a modular macOS malware kit called Mach-O Man that uses fake meeting invites to steal credentials and crypto wallet access from fintech executives and developers. Key Takeaways: North Korea’s Lazarus Group deployed Mach-O Man malware targeting macOS users in crypto and fintech roles in April 2026. Bitso’s Quetzal Team […]
]]>
North Korea’s Lazarus Group is preliminarily attributed with draining approximately $292 million in rsETH from KelpDAO on April 18, 2026. The state-backed hacking entity has been responsible for billions of dollars stolen from the crypto industry over the last few years. Key Takeaways: Lazarus Group drained 116,500 rsETH from KelpDAO on April 18. The Arbitrum […]
]]>
Blockchain investigator ZachXBT published an 11-part thread on April 8, 2026, exposing data exfiltrated from an internal North Korean payment server used by DPRK IT workers, revealing over $3.5 million in processed payments since late November 2025. Key Takeaways: ZachXBT’s April 8 investigation exposed a DPRK IT worker payment server that processed over $3.5 million […]
]]>
Stabble, a Solana-based decentralized exchange ( DEX), urged all liquidity providers on Tuesday, to withdraw their funds immediately after onchain investigator ZachXBT publicly linked a former employee to suspected North Korean IT operations. Key Takeaways: Stabble urged all liquidity providers to withdraw funds on April 7, 2026, after ZachXBT flagged a suspected former employee as […]
]]>
Learn how a North Korean group used 31 fake identities to infiltrate crypto firms and steal $680,000 from Favrr. Inside their tools, tactics and deception.
]]>
North Korean hacking groups are developing new methods to target Web3 companies, including some aimed at infecting Apple systems. Additionally, the use of social engineering is becoming more prevalent in these attacks, highlighting the level of preparation involved in these operations. North Korean Hackers’ New Methods: Nim Malware and Clickfix Hackers groups from North Korea […]
]]>
North Korean developers, operating as fake freelancers, have reportedly amassed over $16.5 million this year by infiltrating crypto and traditional tech companies, according to crypto sleuth ZachXBT. U.S. Exchanges Used to Launder Funds According to online crypto scam investigator ZachXBT, a total of $16.58 million has been paid to North Koreans hired as developers at […]
]]>