UNC4899 Breached Crypto Firm After Developer AirDropped Trojanized File to Work Device

AI Summary

North Korean threat actor UNC4899 (also known as Jade Sleet) breached a cryptocurrency organization in 2025 by exploiting a developer who AirDropped a trojanized file to their work device. The sophisticated cloud compromise campaign resulted in the theft of millions of dollars in cryptocurrency from the targeted firm.

Read full article → https://thehackernews.com/2026/03/unc4899-used-air…

Relevance score: 82.0/100

# More from March 10

1
New Attack Against Wi-Fi Schneier on Security
2
FBI investigating ‘suspicious activities’ on agency network following February incident The Record
3
Dutch govt warns of Signal, WhatsApp account hijacking attacks BleepingComputer
5
ShinyHunters claims ongoing Salesforce Aura data theft attacks BleepingComputer
6
Microsoft Teams phishing targets employees with backdoors BleepingComputer
7
Ericsson US discloses data breach after service provider hack BleepingComputer
8
Malicious npm Package Posing as OpenClaw Installer Deploys RAT, Steals macOS Credentials The Hacker News
9
Chrome Extension Turns Malicious After Ownership Transfer, Enabling Code Injection and Data Theft The Hacker News
10
Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical Infrastructure The Hacker News