SlowMist CISO: North Korean Hackers Launch Targeted Attacks on Web3 Developers

BlockBeats News, January 16, SlowMist CISO 23pds posted on X, revealing: "North Korean hackers launched a network attack named the 'Operation 99' against Web3 and cryptocurrency software developers. The operation started with fake recruitment personnel, posted on platforms like LinkedIn, using project testing and code review to lure developers.

Once the victims take the bait, they are guided to clone a malicious GitLab repository, seemingly harmless but full of disaster. The cloned code connects to a command and control (C2) server, embedding malware into the victim's environment, thereby controlling the victim's computer."