ChainCatcher reports that, according to Cointelegraph, the U.S. cybersecurity firm Mandiant, a subsidiary of Google Cloud, has discovered that North Korea-linked threat groups are increasing social engineering attacks targeting cryptocurrency and fintech companies.
The threat group (codenamed UNC1069) has deployed seven malicious software suites, including newly discovered SILENCELIFT, DEEPBREATH, and CHROMEPUSH, aimed at obtaining sensitive data and stealing digital assets. The attackers exploit compromised Telegram accounts and use AI-generated deepfake videos to lure victims into fake Zoom meetings. Mandiant has been tracking this group since 2018, but advances in AI have helped the group expand its malicious activities since November 2025. In one intrusion, the attackers used stolen cryptocurrency founder Telegram accounts to initiate contact and employed a so-called ClickFix attack to trick victims into executing “troubleshooting” commands containing hidden instructions.
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to
Disclaimer.
Related Articles
Exaggeration » Korean Tax Agency Press Release Reveals Mnemonic, 6.4 Billion Won in Seized Assets Emptied Overnight
The Korean National Tax Service quickly transferred approximately $4.8 million worth of crypto assets after a mnemonic phrase in a press release was not masked, leading to a security breach. This incident is the third cryptocurrency theft in South Korea within the past three months. Experts criticize this as a reflection of law enforcement's insufficient understanding of crypto asset security and emphasize that mnemonic phrases should be strictly protected to prevent asset theft.
動區BlockTempo3h ago
User wallet information exposed! On-chain detective ZachXBT reveals Axiom employee suspected of insider trading
Well-known on-chain detective ZachXBT revealed that Axiom employees at the crypto trading platform abused internal tools to spy on users' wallets and may have used this information for insider trading. Axiom has revoked the relevant access rights and stated that an investigation into the misconduct is underway, emphasizing that this does not represent the overall team values. The investigation has sparked heated discussion in the market, and some traders have profited from predicting the event.
区块客9h ago
XRP Ledger Dev Raises Alert on Fake 'Passes' Scam Targeting Wallets - U.Today
Wietse Wind alerts the XRP community about scams involving fake NFTs and phishing attempts targeting wallet holders. He advises users to verify offers, avoid engagement with suspicious accounts, and underscores the importance of security practices to prevent fraud.
UToday10h ago
Bitcoin Extortion Plot Turns Violent as Fake Mailman Forces Way Into Home
Alleged bitcoin extortion turned violent in Seattle as prosecutors say a suspect posed as a postal worker, forced entry into a home, and demanded cryptocurrency.
Seattle Couple Terrorized in Alleged Bitcoin Extortion Home Invasion
Extortion schemes targeting digital assets such as bitcoin can
Coinpedia12h ago
The US authorities seize over $61 million USD in USDT related to "pig slaughter" scams
U.S. federal agents seized over $61 million in USDT linked to "pig butchering" scams, where victims were lured by fake relationships and promised high crypto returns. Tether cooperated with authorities in asset freezes related to money laundering and fraud cases.
TapChiBitcoin15h ago
Six Polymarket accounts suspected of insider trading, betting on US sanctions against Iran, profit of $1 million
According to analysis company BubblemapsSA's forecast, six newly opened accounts earned approximately $1 million by betting on the U.S. taking action against Iran before February 28. This has raised suspicions of insider trading, a pattern that has appeared in other prediction market cases.
GateNews15h ago
