Google Threat Intelligence Group (GTIG) has just released a report stating that IT personnel linked to North Korea are infiltrating crypto projects in the UK, Germany, Portugal, and Serbia. These individuals have impersonated identities to operate as remote developers, even working on significant blockchain projects like Solana and Anchor/Rust.
Details on the threat
GTIG discovered compromised projects including a blockchain marketplace, AI web applications, and the development of smart contracts on $SOL . Notably, they are involved in the Nodexa project - a token hosting platform using Next.js and CosmosSDK.