North Korean Hackers Use Fake U.S. Companies to Target Crypto Industry

North Korean hackers have infiltrated the cryptocurrency sector by establishing seemingly legitimate U.S.-based companies, according to a report by security firm Silent Push. The attackers used fabricated identities and addresses to register firms like Blocknovas and Softglide, luring crypto developers with fake job offers to deliver malware.

The operation, which involved corporate fronts and social engineering tactics, was disrupted after FBI intervention. Blocknovas, the more active of the two shell companies, listed a South Carolina address while operating as a conduit for malicious activity.

This incident underscores the persistent threat of state-sponsored cyberattacks in the digital asset space. The crypto industry remains a high-value target for sophisticated adversaries seeking to exploit its decentralized nature and rapid growth.