Mingwu CISO : HexagonalRodent lance une attaque contre les développeurs Web3

Mars Finance information, Chief Information Security Officer of Slow Fog @23pds tweeted that Lazarus Group’s HexagonalRodent is targeting Web3 developers through social engineering methods such as “high-paying remote positions” and “recruitment for well-known projects” to induce the execution of malicious code, ultimately stealing users’ crypto assets.
On March 9, 2026, a user with the same name as the fast-draft extension developer was infected with OtterCookie malware, which was used to distribute malicious programs.
Attackers extensively use ChatGPT and Cursor to assist in executing attacks, further enhancing disguise and deception.