Dream Job or Nightmare? Lazarus Group Hunts Crypto Devs with “Graphalgo” Malware
ID: 6c24dca7-e677-5edc-8d9d-7399a2af3139
STIX ID: report--6c24dca7-e677-5edc-8d9d-7399a2af3139
Feed Name: securityonline.info
Threat Score
Lazarus Group’s ‘Graphalgo’ campaign targets cryptocurrency-focused Python and JavaScript developers via fake recruiter lures on social platforms, weaponizing legitimate-seeming npm/PyPI packages (notably bigmathutils) in a modular, multi-stage supply-chain infection chain active since May 2025 and designed to persist and evade takedowns.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.