North Korea’s Lazarus Group Fakes US Companies

North Korea’s Lazarus Group Targets Crypto Developers with Fake US Companies

• Lazarus Group created fake US companies, Blocknovas LLC and Softglide LLC, to target crypto developers.
• The operation involved phishing tactics using fake job listings and malware-laden software downloads.
• Hackers used platforms like LinkedIn and Upwork to appear legitimate and attract victims.
• The FBI seized Blocknovas’ domain as part of actions against North Korean cyber actors.
• North Korea uses Russian infrastructure to conduct these cyber operations internationally.

North Korea’s Lazarus Group set up fictitious US firms to phish crypto developers, using malware to steal sensitive data. The FBI has taken action against these activities by seizing domains linked to the operation.