$285 Million Drift Hack Traced to Six-Month DPRK Social Engineering Operation

Drift attributes a $285M April 1, 2026 theft to DPRK-linked UNC4736 (aka Golden Chollima), describing a six-month targeted social-engineering campaign that used in-person relationship-building, malicious repositories (weaponized VS Code tasks.json), a fraudulent TestFlight wallet, and recruitment-based delivery of malicious packages; the report also situates this operation within DPRK's fragmented malware ecosystem and ongoing IT worker fraud and supply-chain campaigns.