A series of cyber attacks targeting Chinese-speaking regions such as Hong Kong, Taiwan, and mainland China, have been discovered by cybersecurity researchers. These attacks involve known malware ValleyRAT, delivered via a multi-stage loader called PNGPlug. The malware, linked to the group Silver Fox, is delivered discretely within benign applications by a malicious DLL loader hiding within seemingly benign program files.

North Korean Hackers Use Fake U.S. Companies to Spread Malware in Crypto Industry: Report
North Korean hackers reportedly set up shell companies in the US to penetrate the crypto sector and target developers via fake job offers, according to