Related Threat Clusters
-
North Korean Hackers Target Open Source Software Supply Chain via npm Packages
Amazon's threat intelligence has linked a series of compromises of popular npm packages—axios, debug, chalk, and typo-crypto—to a North Korean hacking group known as Sapphire Sleet. The group employed social engineering…
11 articles · Updated July 29, 2026 -
Bybit Sues North Korea Over $1.5 Billion Crypto Theft
Bybit has filed a civil lawsuit against North Korea, its Reconnaissance General Bureau, and the Lazarus Group, accusing them of orchestrating a $1.5 billion hack in February 2025. The lawsuit, filed in the U.S. District…
23 articles · Updated August 8, 2026 -
North Korean Hackers Target macOS Users in Cryptocurrency Theft Campaign
A sophisticated malware campaign targeting macOS users has been linked to North Korean threat group Sapphire Sleet. This operation focuses on cryptocurrency organizations, venture capital firms, and Web3 developers.…
2 articles · Updated June 3, 2026 -
Bitrefill Cyberattack Linked to North Korea's Lazarus Group Exposes Customer Data
Bitrefill, a crypto e-commerce platform, disclosed a cyberattack that began on March 1, 2026, attributed to North Korea's Lazarus Group. The breach started with a compromised employee laptop, allowing attackers to…
8 articles · Updated March 17, 2026 -
BlueNoroff Targets Cryptocurrency Executives with AI-Enhanced Fake Zoom Attacks
North Korea's BlueNoroff group is executing a sophisticated campaign against cryptocurrency executives, utilizing fake Zoom meetings enhanced with AI-generated avatars and stolen video footage. The attacks primarily…
6 articles · Updated April 29, 2026 -
North Korean BlueNoroff Uses AI for Sophisticated Zoom Phishing Attacks
A North Korean cyber group, BlueNoroff, has developed a phishing kit that utilizes AI-generated faces to create convincing fake Zoom and Teams meetings targeting cryptocurrency executives. The kit employs pre-edited…
16 articles · Updated July 24, 2026 -
Canis C2 Surveillance Framework Targets Japan with Phishing Campaign
A previously undocumented surveillance framework, Canis C2, has been identified targeting Japan. The investigation began when researchers discovered a phishing Android application masquerading as Paidy, a…
2 articles · Updated April 13, 2026 -
Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages
A new supply chain attack, dubbed 'Mini Shai-Hulud', has compromised multiple npm packages related to SAP's Cloud Application Programming Model (CAP). This attack involves injecting malicious preinstall scripts into…
753 articles · Updated April 29, 2026 -
Polymarket Suffers $3M Theft from Supply-Chain Attack via Third-Party Vendor
On June 25, 2026, Polymarket confirmed a security breach that led to the theft of approximately $3 million from fewer than 15 user accounts. The attack was executed through a compromised third-party vendor, which…
49 articles · Updated June 25, 2026 -
New MacSync Malware Exploits Apple Notarization to Steal User Credentials
A new variant of the MacSync stealer malware has been identified, exploiting Apple's notarization process to bypass security measures on macOS devices. This malware poses a risk to sensitive user data by disguising…
16 articles · Updated December 22, 2025
Recent Intelligence Reports
- This $1.5 billion hack is exposing just how 'irreversible' stolen crypto really is — Cryptoslate · August 8, 2026
- Amazon links Debug, Chalk NPM supply — Bleepingcomputer · July 30, 2026
- Amazon identifies North Korean hacker group behind open — Aws.Amazon · July 29, 2026
- BlueNoroff builds Zoom phishing kit with ChatGPT-made faces — Aiweekly.Co · July 25, 2026
- BlueNoroff keeps upgrading Zoom phishing kit with wallet profiling and deepfakes — Feeds.4Sysops · July 24, 2026
- BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery — Thehackernews · July 24, 2026
- Polymarket Loses $3M In Frontend Hack, Then Promises Full Repayment — Yellow · June 26, 2026
- Microsoft Attributes Mastra AI Supply Chain Attack to North Korea — Infosecurity-Magazine · June 22, 2026