Freelance Software Developers in North Korean Malware Crosshairs

Summary: A report by ESET reveals that freelance software developers, particularly in the cryptocurrency sector, have been targeted by North Korean hackers through a campaign known as DeceptiveDevelopment. The attackers employed fake job offers to distribute malware that enables them to exfiltrate sensitive data, including cryptocurrency information. This trend reflects North Korea’s ongoing shift towards exploiting cryptocurrencies for financial gain.

Affected: Freelance software developers, cryptocurrency projects

Keypoints :

• Attackers used fake recruitment profiles to lure victims into downloading malicious software.
• The malware, known as BeaverTail and InvisibleFerret, collects sensitive information and supports remote access for attackers.
• The campaign underscores a growing focus on cryptocurrency-related schemes by North Korean cyber actors.