Hackers are using pages imitating Reddit and file sharing site WeTransfer to distribute the Lumma Stealer malware, with some 529 pages mimicking Reddit and 407 posing as WeTransfer. Users are lured into clicking a download link through a fake conversation thread, leading to a fake WeTransfer site and the malware payload. Lumma Stealer is able to steal passwords, session tokens and login data.

North Korean Hackers Use Fake U.S. Companies to Spread Malware in Crypto Industry: Report
North Korean hackers reportedly set up shell companies in the US to penetrate the crypto sector and target developers via fake job offers, according to