Blockchain Report on Nostr: North Korean hackers (BlueNoroff) are targeting crypto users via fake Zoom/Teams ...
North Korean hackers (BlueNoroff) are targeting crypto users via fake Zoom/Teams meeting invites sent through compromised Telegram accounts. Clicking links scans for crypto wallets. Attackers then trick victims into installing malware disguised as an "SDK update." This malware, on Windows/macOS, steals system info, browser creds, and Telegram sessions. It also spreads the attack to the victim's contacts. A sophisticated and persistent threat to crypto. #cybersecurity #crypto #phishing #northkorea
Published at
2026-07-26 00:25:52 UTCEvent JSON
{
"id": "d96ed336df57e51d7bc779a07f37595b04a56b20beb2211234d9a7db75063016",
"pubkey": "c215990326b98e7fff0ccbc865c159332802d9fd39ffa281ec0f8949bd2a3113",
"created_at": 1785025552,
"kind": 1,
"tags": [],
"content": "North Korean hackers (BlueNoroff) are targeting crypto users via fake Zoom/Teams meeting invites sent through compromised Telegram accounts. Clicking links scans for crypto wallets. Attackers then trick victims into installing malware disguised as an \"SDK update.\" This malware, on Windows/macOS, steals system info, browser creds, and Telegram sessions. It also spreads the attack to the victim's contacts. A sophisticated and persistent threat to crypto. #cybersecurity #crypto #phishing #northkorea",
"sig": "c1c06d84cb8a50184ee83090783cffbdf92a1634b5590d21a93e8ac59254d76a82bf859c64cf5a45e1982994a2a554a9f01d0b32602e90f77aa4a418e4599cc3"
}