BlueNoroff Launches New Campaigns Targeting Crypto Executives and Developers

BlueNoroff Launches New Campaigns Targeting Crypto Executives and Developers

First seen 2 Nov 2025, 16:14 UTC •SecurelistDarkreadingCsoonline •12.8

Article Content

Browse articles
ThreatCluster

North Korean threat actor BlueNoroff has initiated two new campaigns, named GhostCall and GhostHire, targeting fintech executives and Web3 developers. These campaigns utilize social engineering tactics on platforms like Telegram to deliver multi-stage malware to compromise both macOS and Windows systems, aiming to steal cryptocurrency and fund the North Korean regime.

How this analysis works

Extracted Entities

1 / 2