Hackers are duping developers with malware-laden coding challenges
Briefly

The North Korean hacker group Slow Pisces is deceiving cryptocurrency developers by presenting fake recruitment processes involving coding challenges. By posing as recruiters on LinkedIn, they lure developers into engaging with compromised Python and JavaScript projects, successfully infecting their systems with custom malware. Analysis from Palo Alto Networks' Unit 42 has identified the malware strains RN Loader and RN Stealer, highlighting the group's sophisticated methods, such as tailored target selection and advanced evasion techniques. Slow Pisces has been linked to over $1 billion in cryptocurrency thefts in 2023, reflecting their significant impact on the sector.
Slow Pisces impersonated several organizations in the cryptocurrency sector, using coding challenges to spread malware disguised as recruitment projects.
The group has been linked to over $1 billion in cryptocurrency thefts in 2023, showcasing their extensive targeting and exploitation strategies.
Read at IT Pro
[
|
]