Slow Fog CISO: Lazarus is contacting targets in the cryptocurrency industry via LinkedIn and stealing employee credentials or assets through malware

ChainCatcher news, Slow Mist's Chief Information Security Officer (CISO) 23pds stated that the Lazarus organization is currently targeting the cryptocurrency industry through LinkedIn, stealing employee credentials or assets via malware.

First, they contact target company managers or HR personnel through LinkedIn, pretending to be job seekers for React/blockchain developers. Then, the attackers claim to be experienced candidates and invite them to access their repository, running relevant code to assess their skill level, while in fact, the repository contains malicious code snippets.