UNC4899 Breached Crypto Firm After Developer AirDropped Trojanized File to Work Device

Source: The Hacker News
Published: Mon, 09 Mar 2026 14:50:00 GMT

News Summary

The North Korean threat actor known as UNC4899 is suspected to be behind a sophisticated cloud compromise campaign targeting a cryptocurrency organization in 2025 to steal millions of dollars in cryptocurrency. The activity has been attributed with moderate confidence to the state-sponsored adversary, which is also tracked under the cryptonyms Jade Sleet, PUKCHONG, Slow Pisces, and

Source

Original report: https://thehackernews.com/2026/03/unc4899-used-airdrop-file-transfer-and.html

This entry mirrors the source feed summary for quick reading.