logo

North Korean hackers siphon more than $12 million from crypto users in sprawling campaign

ID: d5e1c12f-a8ce-5583-91a7-f6f678e6ee7c

STIX ID: report--d5e1c12f-a8ce-5583-91a7-f6f678e6ee7c

Feed Name: The Record from Recorded Future News

Threat Score
80/100

Date Published: 2026-04-22

Date Updated: 2026-05-01

...
...

**Executive Summary:** Incident responders uncovered a North Korean state-linked campaign named HexagonalRodent that targeted Web3 developers with fake job offers and malware-laced coding assessments, using BeaverTail, OtterCookie and InvisibleFerret to exfiltrate credentials and steal approximately $12 million from 26,584 cryptocurrency wallets across 2,726 infected systems.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.