BlueNoroff Launches New Campaigns Targeting Crypto Professionals

BlueNoroff Launches New Campaigns Targeting Crypto Professionals

First seen 2 Dec 2025, 18:33 UTC •SecurelistDarkreadingCsoonlineEsecurityplanet •30.1

Article Content

Browse articles
ThreatCluster

North Korea-aligned threat actor BlueNoroff has initiated two new campaigns, GhostCall and GhostHire, targeting fintech executives and Web3 developers. These campaigns utilize social engineering tactics on platforms like Telegram to deliver multi-stage malware targeting both macOS and Windows systems, with a focus on cryptocurrency theft and espionage.

How this analysis works

Extracted Entities

1 / 2