Back Gbhackers

Lazarus Group’s ‘Graphalgo’ Fake Recruiter Campaign Targets GitHub, npm, and PyPI to Spread Malware

Gbhackers •Mayura Kathir • February 12, 2026

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Lazarus Group's Graphalgo Campaign Targets Developers with Malware via Fake Job Offers The Lazarus Group, a North Korean hacking team, has initiated a fake recruiter campaign named 'Graphalgo' targeting cryptocurrency developers. Active since May 2025, this operation utilizes fraudulent job offers to distribute remote access trojans through platforms like GitHub, npm, and PyPI, affecting developers in the blockchain and cryptocurrency sectors. 7 sources 40

Extracted Entities

Lazarus Group’s ‘Graphalgo’ Fake Recruiter Campaign Targets GitHub, npm, and PyPI to Spread Malware

The full story

Extracted Entities

APT Groups (1)

Attack Types (1)

Campaigns (1)

Platforms (2)

Tools (1)