Lazarus Group Establishes Fake US Firms to Target Crypto Workers
North Korea’s Lazarus Group has reportedly created two fraudulent U.S. companies—Blocknovas LLC and Softglide LLC—in violation of Treasury sanctions. These entities, registered in New York and New Mexico using fabricated identities, were designed to distribute malware to cryptocurrency developers.
A third unregistered entity, Angeloper Agency, has also been linked to the operation. Cybersecurity experts describe this as an unusual case of state-backed hackers successfully establishing legal corporate fronts to exploit job seekers in the crypto sector.