Securelist
BlueNoroff Launches New Campaigns Targeting Crypto Professionals
First seen 2 Dec 2025, 18:33 UTC
•
•84% similarity
•30.1
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
North Korea-aligned threat actor BlueNoroff has initiated two new campaigns, GhostCall and GhostHire, targeting fintech executives and Web3 developers. These campaigns utilize social engineering tactics on platforms like Telegram to deliver multi-stage malware targeting both macOS and Windows systems, with a focus on cryptocurrency theft and espionage.
ThreatCluster AI