Lazarus attacks crypto elite with AI and fake calls
- North Korean hackers from the notorious Lazarus Group are targeting the crypto elite, according to Kaspersky, using fake calls, AI malware, and social engineering tricks. This information comes from a press release obtained by BTC-ECHO.
- In GhostCall, the attackers rely on sophisticated social engineering. Using Telegram, they pose as venture capital investors and lure their victims to fake Zoom or Teams pages. There, they feign technical problems and urge participants to perform a supposed update. In reality, this installs malware. According to Kaspersky, the hackers even played recorded videos of real people to make the meetings appear legitimate.
- The GhostHire campaign targets blockchain developers, luring them with fake job offers and supposed test tasks on GitHub. Anyone who runs the manipulated code automatically infects their system, whether macOS or Windows.
- According to Kaspersky, the campaigns have been running since April 2025 and affect companies in India, Turkey, Australia, and several countries in Europe and Asia. Both attacks share a common command-and-control infrastructure through which stolen data is centrally analyzed.
- The Lazarus Group has been considered one of the world's most dangerous cyber organizations for years and a leading player behind cryptocurrency thefts amounting to billions of dollars. According to recent data, Lazarus Group's cryptocurrency theft in 2025 already exceeded $2.17 billion, and analysts predict this figure could rise to over $4.3 billion by the end of the year.
Recommended video: Bitcoin and altcoins poised for a comeback? Trump & Xi fuel Uptober!
Eine Quelle: btc-echo.de
