FBI: North Korean Actors Readying Aggressive Cyberattack Wave

The FBI warns that North Korean APTs (notably Lazarus and Kimsuky) are conducting reconnaissance and likely imminent social-engineering campaigns aimed at stealing cryptocurrency and deploying malware against organizations with crypto-related assets. Attackers will use highly personalized impersonation and long-term relationship-building (fake recruiters, bespoke offers, pre-employment tests, requests to execute non-standard Node.js/PyPI packages or GitHub code) to gain access; the bulletin details these TTPs and recommends multi-factor verification, isolation of wallet credentials, and strict controls around executing code during recruitment.