logo

The North Korean hacker group "HexagonalRodent" has industrialized attacks on Web3 developers using AI, stealing over $12 million in cryptocurrency assets in three months

By: rootdata|2026/04/24 11:42:01
0
Share
copy
aiai
when-vipwhen-vip

According to a research report by cybersecurity company Expel, it is tracking a highly assessed APT organization supported by North Korea (DPRK) called "HexagonalRodent," which primarily targets Web3 developers and specializes in stealing high-value digital assets such as cryptocurrencies and NFTs.

The organization mainly conducts attacks by forging job postings—posting high-paying positions on LinkedIn and Web3 recruitment platforms to lure job seekers into completing "skills tests" embedded with malicious code, using the tasks.json feature of VSCode to automatically execute malicious programs when victims open project folders. The malware used includes BeaverTail, OtterCookie, and InvisibleFerret, which have capabilities for password theft, remote control, and reverse shell.

It is noteworthy that the organization heavily utilizes generative AI tools such as ChatGPT and Cursor to develop malware, build fake company websites, and create AI-generated executive teams, even registering shell companies in Mexico to enhance the credibility of their attacks

-- Price

--

You may also like

Tom Lee's Ethereum Thesis: Why the Man Who Called the Last Cycle Is Doubling Down on Bitmine

Tom Lee is emerging as one of Ethereum’s most influential supporters. From Fundstrat to Bitmine, his Ethereum thesis combines staking yield, treasury accumulation, and long-term network value. Here is why “Tom Lee Ethereum” has become one of crypto’s most watched narratives.

Naval personally takes the stage: The historic collision between ordinary people and venture capital

Naval personally stepped in as the chairman of the USVC Investment Committee. This SEC-registered fund launched by AngelList attempts to bring top private tech assets like OpenAI, Anthropic, and xAI to the general public with a $500 entry threshold. It is not just a new fund, but a structural experi...

a16z Crypto: 9 Charts to Understand the Evolution Trends of Stablecoins

Stablecoins are evolving from trading tools into universal payment infrastructure, and this process is quieter and more thorough than most people expected.

Refutation of Yang Haipo's "The End of Cryptocurrency"

This may be the true test of cryptocurrency. It's not about whether the price has reached a new high, nor about who will achieve financial freedom in the next bull market, but rather whether, after all the grand narratives have been washed away by cycles, it can still leave behind some simpler, more...

Can a hairdryer earn $34,000? Interpreting the reflexivity paradox of prediction markets

Prediction markets are essentially betting on reality, and when participants can access or even influence this path earlier, the market no longer just reflects reality but begins to shape it in return.

6MV Founder: In 2026, the "landmark turning point" for crypto investment has arrived

"I will deploy funds in 2026, so I will tell you this is the best year in history."
The Joker is back
Bigger pools, auto-play, lucky buffs.
The Joker is backJoin now and grab your rewards.

Contents

Popular coins

Latest Crypto News

15:42

Data: The current whale position on the Hyperliquid platform is 3.482 billion USD, with a long-short position ratio of 1.03

According to Coinglass data, the current holdings of whales on the Hyperliquid platform amount to $3.482 billion, with long positions of $1.762 billion, accounting for 50.62% of the holdings, and short positions of $1.719 billion, accounting for 49.38%. The profit and loss for long positions is -$4....
14:42

The suspect in the White House Correspondents' Dinner shooting admitted that the target was officials of the Trump administration

According to a report by Jinshi, a recruitment agency, the suspect in the shooting at the White House Correspondents' Dinner admitted that his target was officials of the Trump administration.
14:42

Arkham: Ethereum Foundation unstakes $48.9 million worth of ETH, market is concerned whether further sales will occur

The on-chain analysis platform Arkham posted on X that the Ethereum Foundation has unstaked approximately $48.9 million worth of ETH. Tracking data shows that the Ethereum Foundation has deposited WSTETH into Lido's unstETH contract, and after the unlocking process is completed, it will receive the ...
13:42

Trump: Being president is a dangerous job, and I don't want to live in fear

According to Jinshi reports, after the shooting incident at the White House Correspondents' Dinner, when asked if he was worried about facing a threat to his life, U.S. President Trump said, "This (presidency) is a dangerous profession." However, he stated that he did not want to live in fear.He als...
13:42

Analyst: $80,000 is the current first effective resistance for BTC. If it breaks through $82,000 or enters an expanded volatility range

Crypto analyst Murphy posted on the X platform, stating that by overlaying three sets of data (Options Gamma Exposure, Options Open Interest by Strike Price, Options ATM Implied Volatility), the impact on BTC from an options perspective shows that $80,000 is currently the first effective resistance ...
Read more
Community
iconiconiconiconiconiconicon

Customer Support Bot：@WEEX_support_smart_Bot

VIP Services：support@weex.com