North Korean Hackers Expand Cyber Campaign with Blockchain-Based Tools
North Korean hacking group Famous Chollima has escalated its global cyber campaign, deploying sophisticated blockchain-based malware to steal cryptocurrency and infiltrate networks. Researchers at Cisco Talos identified two evolved malware strains—BeaverTail and OtterCookie—now operating in tandem with enhanced functionalities.
The group's latest attack vector exploits fake job recruitment scams, as seen in a recent incident targeting a Sri Lankan organization. A job seeker unwittingly installed malicious code disguised as a technical evaluation, triggering a keylogging module that covertly transmitted sensitive data to remote servers.
This development underscores the growing sophistication of state-sponsored cyber threats in the cryptocurrency ecosystem. Attackers are increasingly leveraging social engineering tactics combined with advanced technical capabilities, posing systemic risks to both individuals and institutions.
