Mandiant: North Korean hacking groups are increasing social engineering attacks targeting cryptocurrency and fintech companies

ChainCatcher reports that, according to Cointelegraph, the U.S. cybersecurity firm Mandiant, a subsidiary of Google Cloud, has discovered that North Korea-linked threat groups are increasing social engineering attacks targeting cryptocurrency and fintech companies.

The threat group (codenamed UNC1069) has deployed seven malicious software suites, including newly discovered SILENCELIFT, DEEPBREATH, and CHROMEPUSH, aimed at obtaining sensitive data and stealing digital assets. The attackers exploit compromised Telegram accounts and use AI-generated deepfake videos to lure victims into fake Zoom meetings. Mandiant has been tracking this group since 2018, but advances in AI have helped the group expand its malicious activities since November 2025. In one intrusion, the attackers used stolen cryptocurrency founder Telegram accounts to initiate contact and employed a so-called ClickFix attack to trick victims into executing “troubleshooting” commands containing hidden instructions.

View Original
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.

Related Articles

XRP Today's News: XRPL Serious Vulnerability Nearly Cleared Wallets, Emergency Patch Promotes $1.35 Rebound

The proposed batch revision (XLS-56) for the XRP Ledger has been found to have a serious logical flaw that could lead to unauthorized ledger modifications. However, since it has never been activated on the mainnet, holder funds remain secure. Developers have marked this revision as unsupported and provided a comprehensive fix. XRP technical analysis shows a rebound from the $1.35 support level, with the next resistance at $1.61.

MarketWhisper4m ago

Korean National Tax Service leaks seed phrase, white-hat hacker empties 4.8 million tokens and returns everything

The Korean National Tax Service was targeted by unknown individuals who transferred 4 million Pre-Retogeum tokens, worth approximately $4.8 million, after releasing a photo containing the 12-word seed phrase for a Ledger hardware wallet. This incident exposed security vulnerabilities in government agencies' digital asset custody. Although the tokens have been returned, it highlights the need to strengthen digital asset protection.

MarketWhisper11m ago

Predicting market insider trading scandal exposure, OpenAI takes the lead in dismissing involved employees

OpenAI has dismissed an employee for allegedly using insider information to conduct insider trading in prediction markets, violating company compliance policies. This is the first time a large tech company has fired an employee over insider trading, sparking concerns about regulation of prediction markets. On-chain data shows multiple suspicious transactions beyond that employee, which may indicate a broader insider information leak issue.

MarketWhisper1h ago

Quantum computers could threaten crypto security, Ledger CTO warns

Experts warn that quantum computers powerful enough to break elliptic curve cryptography (ECC) may threaten crypto network security. ECC, crucial for public and private key systems, could be compromised, enabling the retrieval of private keys from public ones. While post-quantum cryptography (PQC) offers promising solutions, implementation challenges remain. Cryptocurrency communities are urged to prepare proactively to safeguard digital asset infrastructure against future quantum threats.

TapChiBitcoin1h ago

Former Mt. Gox CEO proposes Bitcoin hard fork to recover $5.2 billion stolen assets

Former Mt. Gox CEO Karpelès proposes recovering the 79,956 BTC stolen in 2011, worth approximately $5.2 billion, through a Bitcoin hard fork. The plan allows funds in specific addresses to be managed under new rules to repay creditors, but it requires coordination across the entire network and carries a risk of division.

GateNews5h ago

$1.2M in Profits Tied to Insider-Linked Addresses in ZachXBT Market Bet

_Eight insider-linked wallets captured $1.2M in profits, mostly from single-market bets placed before odds shifted._ On-chain data has intensified scrutiny around a Polymarket event linked to a ZachXBT insider probe. Trading records show heavy profit concentration among a small cluster of wallet

LiveBTCNews15h ago
Comment
0/400
No comments
Trade Crypto Anywhere Anytime
qrCode
Scan to download Gate App
Community
  • 简体中文
  • English
  • Tiếng Việt
  • 繁體中文
  • Español
  • Русский
  • Français (Afrique)
  • Português (Portugal)
  • Bahasa Indonesia
  • 日本語
  • بالعربية
  • Українська
  • Português (Brasil)