North Korean Hackers Target Crypto Projects With MacOS Exploit

North Korean state-backed hackers have launched a sophisticated malware campaign targeting cryptocurrency companies, marking a concerning shift toward exploiting Apple’s macOS systems. Disguised as a Zoom update, the malware infiltrates developer machines to steal sensitive data—passwords, wallet information, and internal files—posing significant risks to Web3 and decentralized finance teams.

Cybersecurity firm SentinelOne revealed the threat on 2 July, noting its use of the obscure Nim programming language to evade detection. "DPRK threat actors are utilizing Nim-compiled binaries and multiple attack chains," the report stated, linking the campaign to 2023’s Hidden Risk operation, which employed PDF lures and macOS persistence tricks.

Blockchain analytics provider Chainalysis estimates North Korea stole over $1 billion in crypto last year across 20 incidents, with proceeds likely funding weapons programs. The escalation underscores urgent calls for heightened security measures in the crypto sector.