North Korean Hackers Use Fake US Companies to Target Crypto Developers

North Korean hackers have established fraudulent US-based companies to infiltrate the cryptocurrency sector. Cybersecurity firm Silent Push identified Blocknovas LLC in New Mexico and Softglide LLC in New York as front organizations created with fabricated identities and rented addresses. These entities posed as legitimate employers to distribute malware to job applicants.

A third company, Angeloper Agency, displayed identical malicious web fingerprints but lacked registration in US corporate databases. "This is a rare example of North Korean hackers actually managing to set up legal corporate entities in the US to create fronts for attacks," said Kasey Best, Silent Push’s director of threat intelligence.

The FBI has taken action, posting a seizure notice on Blocknovas’ website, though the bureau declined direct comment on the investigation. The operation highlights growing cybersecurity risks in the blockchain ecosystem as bad actors employ increasingly sophisticated tactics.