According to @zachxbt, a North Korean hacking group known as Famous Chollima is actively targeting cryptocurrency professionals with a new Python-based malware called PylangGhost. The attack, detailed by Cisco Talos researchers, uses sophisticated fake career sites impersonating top firms like Coinbase and Uniswap to lure targets into a fraudulent job application process. This process tricks users into running a command that installs the malware, which is designed to steal credentials and wallet data from over 80 browser extensions, including MetaMask and Phantom. This poses a significant direct risk to traders' assets. Compounding the security threat, a TRM Labs report reveals that the first half of 2025 was the worst on record for crypto security, with over $2.1 billion lost to hacks. North Korean-linked groups are reportedly responsible for $1.6 billion of this total, largely due to the historic $1.5 billion Bybit hack. The report also highlights a strategic shift in attack vectors, with 80% of stolen funds coming from infrastructure-level breaches like private key theft, which are proving far more lucrative than smart contract exploits. Despite these severe security threats, market data shows Ethereum (ETH) trading resiliently around $2,600, up over 6% in the past 24 hours.

According to @zachxbt, North Korean hackers are deploying a new Python-based malware called PylangGhost, disguised in fake job applications from major crypto firms like Coinbase and Uniswap to steal wallet credentials. A report from Cisco Talos details that the malware targets crypto professionals on Windows systems, aiming to compromise wallets such as MetaMask and Phantom. This activity is part of a larger, alarming trend highlighted by a TRM Labs report, which found that a record $2.1 billion was stolen from crypto platforms in the first half of 2025. North Korean-linked groups are reportedly responsible for $1.6 billion of these losses, primarily due to the historic $1.5 billion Bybit hack. The analysis indicates a strategic shift in attack vectors, with over 80% of stolen funds coming from infrastructure-level breaches like private key theft, which are proving far more profitable than DeFi exploits. Despite these significant security threats, market data shows resilience, with Ethereum (ETH) trading around $2,599.45, up over 6.3% in 24 hours, and Chainlink (LINK) at $13.81, up over 5.8%.

According to @zachxbt, the first half of 2025 has set a grim record with over $2.1 billion lost to crypto hacks and exploits, marking the worst six-month period for digital asset security. A TRM Labs report highlights that North Korean-linked groups are the primary threat, responsible for $1.6 billion (70%) of these losses, heavily skewed by the historic $1.5 billion Bybit hack. From a trading perspective, the attack vectors have critically shifted; over 80% of stolen funds now originate from infrastructure-level breaches like private key theft, which are ten times more lucrative than the once-dominant DeFi smart contract exploits. Concurrently, a new malware threat named PylangGhost has emerged, as detailed by Cisco Talos. This malware, operated by the North Korean group Famous Chollima, targets crypto professionals through fake job applications for major firms like Coinbase, Robinhood, and Uniswap. The malware is designed to steal credentials and data from over 80 browser extensions, including popular wallets like MetaMask and Phantom, posing a direct and severe risk to individual traders' holdings. Despite these significant security threats, market data indicates resilience, with Ethereum (ETH) posting a 24-hour gain of over 6%, trading around $2,600.