Post

I spent nearly 4 months investigating the inner workings of a North Korean state-sponsored hacking group. Here's what I learned: 🧵 - The group used generative AI tools to aid in almost every part of their operation. - They exfiltrated 26,584 cryptocurrency wallets from 2,726 victim systems. 1/3

Marcus Hutchins

@malwaretech.com

- In several cases, the threat actors set up entire front companies to lure in software developers via job listings promising high salaries. - The attackers would hide their malware inside 'skills assessments' send out to applicants as part of an elaborate fake technical interview process. 2/3

22/4/26, 7:43 pm22 reposts116 likes

Orogenesis

@orogenesis.bsky.social

Well that’s rude.

- The threat actors successfully pulled off a supply-chain attack by compromising the developer of a VS Code extension and injecting it with malware. - Mass layoffs across tech likely contributed to the success of the hacker's elaborate scheme. Full article: expel.com/blog/inside-... 3/3