The information provided herein is generated by experimental artificial intelligence and is for informational purposes only.
This summary text is fully AI-generated and may therefore contain errors or be incomplete.
This summary text is fully AI-generated and may therefore contain errors or be incomplete.
Security researchers have uncovered a sophisticated campaign using Ethereum smart contracts to distribute malware through poisoned open-source code libraries. This novel attack method targets developers using popular package repositories like NPM, with North Korean state actors identified as primary perpetrators. The discovery highlights evolving threats to the crypto ecosystem’s infrastructure.
- Attackers used Ethereum smart contracts to host malicious URLs, a novel method for distributing second-stage malware through poisoned NPM packages
- North Korean state actors, particularly the Lazarus group, are identified as primary perpetrators behind these attacks, responsible for 61% of all crypto stolen in 2024
- Major crypto exchanges including Binance, Coinbase, and Kraken maintain intelligence-sharing alliances through secure channels to quickly identify and respond to such threats
📎 Read the original article on decrypt.co
Other Tags: Lazarus Group