North Korea-linked hackers compromised 7,000+ crypto wallets across 30,000+ infected devices in 100+ countries, stealing at least $10.7M.
Security & Exploits ·
North Korea-linked hackers infected over 30,000 devices across more than 100 countries and compromised data from over 7,000 cryptocurrency wallets, according to Japanese and U.S. authorities. The attackers transferred at least $10.7 million into wallets under their control.
The campaign appears to have leveraged job recruitment impersonation as its initial attack vector to distribute malware across the global device network. The scale of the operation—spanning both the number of infected machines and the breadth of targeted wallets—suggests a coordinated effort to harvest cryptocurrency holdings and credentials at volume.
Details remain limited on the specific malware families deployed, the timeline of the intrusions, or recovery efforts by the affected parties. The identities of the cryptocurrency wallets targeted and the distribution of stolen funds across exchanges or mixing services have not been disclosed.