According to reports, threat intelligence research agency Cisco Talos released its latest investigation results on June 20, revealing a targeted cyber attack against professionals in the crypto assets industry. A North Korean hacker group disguised as human resources representatives from well-known crypto platforms conducted fake job interviews and implanted a Python remote access Trojan known as "PylangGhost" into job seekers.

Research shows that this malware can extract user credentials from over 80 types of browser extensions, including popular encryption wallet Metamask and password management tool 1Password, and can establish a long-term remote access channel. This attack primarily targets Windows and macOS operating system users, while Linux system users have not yet been affected.

Security experts have linked this attack to the notorious hacker group "Famous Chollima" (also known as "Wagemole"). This incident serves as another reminder for Crypto Assets practitioners to remain highly vigilant during online recruitment activities, especially when it involves installing unknown programs.