North Korean hackers stole funds from 7,000 crypto wallets via fake job offers
- —More than 30,000 PCs infected in 100+ countries between December 2025 and July 2026
- —More than 7,000 crypto wallets affected, damage from $10.71 million
- —The attack runs through fake interviews and test assignments with malicious code
- —Malicious NPM packages: BeaverTail, InvisibleFerret, OtterCookie, StoatWaffle
Why it matters: The scheme hits private holders with no compensation; developers should isolate the machine holding keys from the environment where they run third-party code.
Source: CryptoTicker