North Korean hackers targeted crypto exec with fake Zoom meeting, ClickFix scam

Back Therecord.Media

North Korean hackers targeted crypto exec with fake Zoom meeting, ClickFix scam

Therecord.Media • February 10, 2026

Share: View original

... actor based in North Korea ... Mandiant said it found two different data miners used by the threat actors called DEEPBREATH and CHROMEPUSH.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

North Korean Hackers Use Fake Zoom to Target Crypto Executive North Korean hackers targeted a cryptocurrency executive through a fake Zoom meeting, employing a ClickFix scam. Mandiant reported the use of two data miners, DEEPBREATH and CHROMEPUSH, in the attack. This incident highlights the ongoing threat posed by state-sponsored cyber actors in the cryptocurrency sector. 1 sources 27

Extracted Entities

APT Groups (2)

Chromepush Deepbreath

Attack Types (1)

Countries (1)

Platforms (1)