
The North Korean Lazarus hacker group has unveiled a new tactic. This time, they’re targeting developers in the Crypto/DeFi space. Here’s how it works: · Pose as recruiters and schedule interviews · Send candidates a code repository to clone and complete a task · The repository contains a hidden malicious loader in the pre-commit script · Once executed, it steals wallets, login credentials, and browser data Under the guise of an onboarding test, they directly infiltrate your computer to steal your funds. Be careful when taking on these tasks, everyone.




