The North Korean hacker group is attacking Crypto Assets practitioners using the PylangGhost Trojan.

[Bitu] A cyber threat actor associated with North Korea is using new malware to target job seekers in the Crypto Assets industry, aiming to steal passwords for Crypto Assets Wallets and password managers. Cisco Talos reported on Wednesday that it has discovered a Python-based Remote Access Trojan (RAT) named “PylangGhost,” linking the malware to a North Korean-associated hacking group called “Famous Chollima” (also known as “Wagemole”).

This hacker organization mainly targets job seekers and employees with experience in Crypto Assets and blockchain, especially in India, by conducting fraudulent job interview activities through social engineering tactics.