A DPRK-linked group is using fake job sites and Python malware to infiltrate Windows systems of blockchain professionals — ...

A threat actor is abusing Cloudflare Tunnels for the delivery of a Python loader as part of a complex infection chain.

North Korean hackers use "PylangGhost" trojan posing as Coinbase recruiters to steal crypto credentials through fake job ...

North Korean hackers lured crypto professionals with fake job interviews to deploy new Python-based malware, PylangGhost.

PylangGhost grants persistent remote access, fingerprinting the device and establishing connections to command-and-control ...