North Korean hackers behind $50 million crypto heist of Radiant Capital

Radiant Capital was compromised after engineers received a ZIP containing a PDF that deployed the INLETDRIFT macOS backdoor; the activity is attributed to North Korean APT AppleJeus/Citrine Sleet and resulted in theft of more than $50M. The attack used social engineering and a malicious document that masked malicious transactions behind benign front-end displays, demonstrating high sophistication and supply-chain targeting; Radiant engaged Mandiant and law enforcement to investigate and recover assets.