North Korean threat actors are utilizing novel malware, identified as “PylangGhost,” to target individuals within the cryptocurrency and blockchain industries. According to Cisco Talos, these groups are employing sophisticated social engineering tactics, including fake job advertisements and interviews, to compromise victims’ systems. The malware’s primary objective is to exfiltrate sensitive data, including wallet credentials and password manager information.
