Seoul, February 21, 2025 –North Korean hackers are tricking freelance crypto developers with fake jobs, infecting their systems to steal crypto assets.
North Korean hackers are luring freelance cryptocurrency developers with fake job offers, infecting their systems with stealthy malware designed to steal crypto wallets, login credentials, and financial data.
The campaign, dubbed DeceptiveDevelopment”, has been active since late 2023 and is linked to Lazarus Group, North Korea’s notorious state-backed cybercrime unit.
Hackers pose as recruiters on platforms like Upwork, Freelancer.com, and GitHub, tricking developers into completing “test projects” containing hidden malware.
These projects often appear as blockchain games, crypto trading tools, or gambling apps—but once executed, they install BeaverTail and InvisibleFerret, two advanced malware strains that log keystrokes, steal passwords, and drain cryptocurrency wallets.
A cybersecurity analyst Nathaniel Morales said:
This is one of the most sophisticated social engineering attacks targeting crypto developers. By the time victims realize they’ve been scammed, their digital assets are already gone.
The campaign has successfully targeted developers worldwide, with victims reported in the U.S., India, Spain, South Africa, Finland, and Ukraine. Hackers also use malicious video conferencing tools like MiroTalk and FreeConference, which secretly record keystrokes and clipboard data.
Cybersecurity expert Mike Herrington warned:
North Korean hackers aren’t just stealing crypto; they’re funding the regime’s operations.
Experts urge crypto developers to verify job offers, avoid downloading private repositories, and use virtual machines when testing new projects.
Other News At VPNRanks
Hey, wait!
Stay informed on the latest privacy updates, cybersecurity insights, and internet freedom news by following VPNRanks news daily! As your primary resource for critical updates in online security, we ensure you’re always in the know. Make VPNRanks your go-to guide for safeguarding your digital life.