North Korea Launches New Information-Stealing Malware "PylangGhost" Targeting Cryptocurrency Professionals

A North Korea-linked cyber threat actor is targeting job seekers in the cryptocurrency industry with a new type of malware designed to steal passwords from crypto wallets and password managers. Cisco Talos reported on Wednesday that it had discovered a Python-based remote access trojan (RAT) named "PylangGhost," attributing the malware to a North Korean-affiliated hacker group known as "Famous Chollima" (also called "Wagemole"). This group primarily targets job seekers and employees with experience in cryptocurrency and blockchain, especially in India, by conducting fake job interview campaigns through social engineering tactics.