Crypto-Crime Chronicles: Slow Pisces Nets $1.5 Billion in Malware Mayhem

Slow Pisces, the North Korean cyber group, isn’t just fishing for attention—they’re baiting developers with malware-laden “coding challenges” on LinkedIn. These fancy phishers reel in victims by posing as potential employers and have reportedly stolen over $1 billion from the cryptocurrency sector. So, if you think you’ve hooked a job, make sure it’s not a scam!

Pro Dashboard

Hot Take:

Watch out LinkedIn users! Slow Pisces is here to turn your coding dreams into a cryptocurrency nightmare. Who knew North Korean hackers moonlighted as job recruiters? Maybe they should stick to stealing hearts instead of bitcoins!

Key Points:

  • Slow Pisces, a North Korean group, targets cryptocurrency developers via LinkedIn, posing as potential employers.
  • They send malware disguised as coding challenges, leading to infections like RN Loader and RN Stealer.
  • The group allegedly stole over $1 billion USD from the crypto sector in 2023.
  • Tech giants like GitHub and LinkedIn have removed malicious accounts linked to Slow Pisces.
  • YAML deserialization and EJS escapeFunction are used to conceal malware execution.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here
The Nimble Nerd
Confessional Booth of Our Digital Sins

Okay, deep breath, let's get this over with. In the grand act of digital self-sabotage, we've littered this site with cookies. Yep, we did that. Why? So your highness can have a 'premium' experience or whatever. These traitorous cookies hide in your browser, eagerly waiting to welcome you back like a guilty dog that's just chewed your favorite shoe. And, if that's not enough, they also tattle on which parts of our sad little corner of the web you obsess over. Feels dirty, doesn't it?