North Korean hackers linked to the state’s notorious Lazarus Group have set up shell companies within the United States to target crypto developers.
The hackers posed as legitimate employers offering jobs in the crypto industry, using fake names, addresses, and documentation.
They used fake professional profiles and job postings on platforms like LinkedIn to approach developers, inviting them to 'interviews' where they were encouraged to download malware.
The FBI has seized one of the shell companies' domains and confirmed the use of North Korean malware in the campaign.