Security Agency: Suspected North Korean hacker group collaborates to attack cryptocurrency companies to steal keys and cloud assets
Security research organization Ctrl-Alt-Intel disclosed that a group of hackers suspected to be linked to North Korea has targeted staking platforms, exchange software vendors, and cryptocurrency exchanges.
The attackers exploited the React2Shell vulnerability (CVE-2025-55182) and compromised cloud environments using obtained AWS access credentials, enumerating resources such as S3, EC2, RDS, EKS, and ECR, and extracting keys and credentials from Secrets Manager, Terraform files, Kubernetes configurations, and Docker containers. Researchers stated that the attackers downloaded 5 Docker images and stole source code, including components related to ChainUp clients.
The attack infrastructure involved a South Korean server 64.176.226[.]36 and the domain itemnania[.]com. The report indicated that this activity is consistent with North Korean-related attack characteristics, but the attribution confidence level is moderate, and the source of the AWS credentials remains unclear.
You may also like

Bitcoin Market Analysis 2026: Can BTC Reach $150K by Year-End?

STRC unanchored by 11%, can the perpetual motion machine of Strategy still operate?

Bitcoin ETF Outflows Hit a Record $4.4 Billion: What Are Traders Doing With Their Cash?

WEEX App Just Got Smarter – New Tabs for Faster Trades & Easy Asset Management

Blockchain Capital Partner: The Core Secret of Arbitrage

WEEX All-New Search Features: Find, Trade & Earn Faster Than Ever

Will MicroStrategy fall into a death spiral? What will the macro trend be in the second half of the year?

Morning Report | Illinois signs the strictest digital asset tax law in the U.S.; RWA tokenization market size surpasses $43 billion, institutions accelerate the migration of on-chain assets

Full version of the debut Q&A! Federal Reserve Chairman Waller: Sticking to the 2% inflation target, establishing five special working groups, individual did not submit the dot plot

From Disruptor to Shadow Market: The Crypto Market is Becoming a Colony of Traditional Finance

Dalio's important long article: How to position in the current market environment?

OKX Star analyzes Binance's competitive advantages: when regulation levels the playing field, competition has just begun

New gameplay for participating in initial offerings on cryptocurrency exchanges

Why Is Bitcoin Down Today? What the Hawkish FOMC Means for SpaceX, Gold and Nasdaq

DeepSeek Financing Story

Morning Report | DeepSeek completes over $7 billion in financing, with a valuation exceeding $50 billion; Musk's personal wealth has surpassed the total market value of Bitcoin

Cursor, why did you get on Musk's spaceship?

