Back Nknews

North Korean hackers deploy arsenal of six new malware in espionage campaign

Nknews • February 11, 2026

Sophisticated attack used AI to impersonate a cryptocurrency CEO, seeking data for future crypto heists

Shreyas Reddy February 11, 2026

North Korean cybercriminals have deployed a wave of new malware in a campaign to collect data for future cryptocurrency heists, using artificial intelligence (AI) to impersonate a crypto executive, according to security researchers.

The campaign, attributed to a DPRK-linked cybercrime group tracked as UNC1069, used a variety of trademark North Korean tactics to perpetrate a highly targeted attack, the Google-owned cybersecurity firm Mandiant said in a report published Tuesday.

UNC1069 — active since 2018 and also known as MASAN — has a long history of targeting financial services and virtual currency firms specializing in payments, brokerage, staking and

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

North Korean Hackers Use AI Deepfakes in Crypto Attacks Google's Mandiant security team reported that North Korean hackers, identified as UNC1069 or 'CryptoCore', are employing AI-generated deepfakes in fraudulent video meetings to target cryptocurrency companies. The investigation revealed a recent intrusion at a fintech firm linked to these sophisticated tactics, which included using a compromised Telegram account for the attack. 20 sources 30

Extracted Entities

North Korean hackers deploy arsenal of six new malware in espionage campaign

The full story

Extracted Entities

APT Groups (2)

Attack Types (1)

Industries (1)