January 22, 2025: North Korean hackers—linked to the theft of over $2 billion from the cryptocurrency market in 2025—have resurfaced. A hacking group called PurpleBravo launched a large-scale fake recruitment drive targeting more than 3,100 internet addresses tied to firms in artificial intelligence, cryptocurrency, and financial services. Posing as recruiters or developers, the attackers directed job candidates to complete technical interview tasks—including code reviews, repository cloning, or coding exercises—leading to malicious code executing on corporate devices. To date, 20 organizations across South Asia, North America, Europe, the Middle East, and Central America have been confirmed as victims. Researchers discovered the group used forged Ukrainian identities to obfuscate their activity, while deploying two remote access trojans: PylangGhost and GolangGhost, which stole browser credentials. They also weaponized Microsoft Visual Studio Code (VS Code) to implant backdoors via malicious Git repositories.

North Korean Hackers Resurface with Fake Job Interview Attack Targeting Over 3,100 IP Addresses

Lookonchain

Other articles published on Jan 22, 2026

Can HBAR Hit $1? What It Would Take

JasmyChain Completes Mainnet Migration And Enters Production

What to Expect from Bee Network in 2026

Kaisar Network Explained: Earn From Your Idle Hardware

BNB Chain Launches $650k Trenching Season Across Five Trading Platforms

What Is Pi Wallet: Explore How It Works, How to Get Started, and More

Join our free newsletter for daily crypto updates!