North Korean threat actors are targeting individuals and organisations in the blockchain and cryptocurrency space, primarily for financial gain, says cybersecurity firm Mandiant. They use custom-built tools to infect various operating systems and hone in on developers working on Web3-adjacent projects. Mandiant also revealed that thousands of North Korean IT workers, many based in China and Russia, use fake personas and deepfake technology to secure remote jobs at companies in the U.S., Europe, and Asia, before funneling their salaries back to North Korea to fund sanctions-skirting activities.

UK’s Legal Aid Agency Experiences Cyberattack
A UK Ministry of Justice executive agency was targeted in a cyberattack, compromising its systems. The incident highlights vulnerabilities in cybersecurity, prompting a review of