North Korean Hackers Exploit US Shell Companies to Target Crypto Developers
North Korean hackers have orchestrated a sophisticated cyberattack by establishing fake US-based businesses to distribute crypto-stealing malware. Three entities—Blocknovas, Softglide, and Angeloper Agency—were used as fronts, with Angeloper operating without legal registration. The FBI has seized Blocknovas’ website, revealing its role in disseminating malware through fraudulent job postings.
The operation highlights the growing convergence of cybercrime and cryptocurrency theft, with social engineering tactics enabling hackers to infiltrate developer networks. While no specific coins or exchanges were directly named in the breach, the incident underscores systemic vulnerabilities in the digital asset ecosystem.