North Korean cyber spies established two firms, Blocknovas and Softglide, in the US to infect cryptocurrency developers with malware, violating Treasury sanctions, according to US cybersecurity firm Silent Push. A third firm, Angeloper Agency, was also involved but unregistered in the US. This represents a rare instance of North Korean hackers setting up legitimate US entities to target job seekers. The hackers belong to a Lazarus Group subgroup, part of North Korea’s main foreign intelligence agency.
North Korean hackers set up 3 shell companies to scam crypto devs
North Korean-linked hacker group Lazarus set up three shell companies, including two in the US, to distribute malware through fake job interviews, according to a
