Cyberpunk City narxiCYBER

North Korean hackers linked to the state’s notorious Lazarus Group have successfully set up shell companies within the United States to distribute malware to cryptocurrency developers, in a scheme that violates US sanctions and exposes major vulnerabilities in business registration systems. According to Reuters, cybersecurity firm Silent Push revealed that two companies—Blocknovas LLC in New Mexico and Softglide LLC in New York—were formed using falsified names, addresses, and documentation, which helped North Korean actors pose as legitimate employers offering jobs in the crypto industry. A third entity, Angeloper Agency, has also been linked to the campaign but has not been registered in the country. Silent Push attributed the operation to a subgroup within the Lazarus Group, a state-sponsored hacking unit operating under North Korea’s Reconnaissance General Bureau. The group is known for its role in high-profile cyber thefts and espionage activities. In this campaign, the hackers used fake professional profiles and job postings to approach developers, primarily on platforms such as LinkedIn. Once contact was made, victims were invited to “interviews” where they were encouraged to download malware disguised as hiring software or technical assessments. Blocknovas was the most active entity, with multiple confirmed victims. Its listed physical address in South Carolina was found to be an empty lot. Meanwhile, Softglide was registered through a Buffalo-based tax preparation service, which further complicated efforts to trace those behind the operations. The malware used included strains previously attributed to North Korean cyber units, capable of data theft, remote access, and further network infiltration. The FBI has seized the Blocknovas domain, with a notice on its website indicating it was used to deceive job seekers and spread malware. The Lazarus Group has repeatedly exploited fake employment opportunities to deliver malware. For instance, it had launched a cyber campaign called “ClickFix” targeting job seekers in the centralized finance (CeFi) crypto sector. Cybersecurity firm Sekoia recently revealed that the group impersonates companies like Coinbase and Tether to lure marketing and business applicants into fake interviews. One of Lazarus’s biggest crypto thefts came in 2021, when a bogus job offer led to the $625 million Ronin Bridge hack targeting Axie Infinity.

Cryptocurrency advocates in Switzerland have stepped up to persuade the Swiss National Bank (SNB) to hold Bitcoin in its foreign reserves. The campaign introduced in December 2024 seeks a constitutional amendment that would require the SNB to hold Bitcoin alongside gold. Luzius Meisser, a board member of Bitcoin Suisse, a cryptocurrency broker and a leading voice in the campaign, stresses that Bitcoin protects against inflation from government debt spending. He pointed out that Switzerland maintains its foreign reserves portfolio mainly in U.S. dollars and euros, exposing it to geopolitical risks and monetary policy changes. Supporters of the initiative highlight Switzerland’s emerging role as a center for blockchain innovation, citing developments such as Ethereum’s origins in Zug, now widely known as “Crypto Valley.” According to a study by Lucerne University of Applied Sciences and Arts, approximately 11% of Switzerland’s population holds cryptocurrency assets. While the campaign progresses, the Swiss National Bank cautiously approaches cryptocurrency adoption. During his address, Chairman Martin Schlegel expressed the institution’s concerns about Bitcoin, including price volatility, software vulnerabilities, and unstable liquidity. Schlegel stated during his interview with Tages-Anzeiger in March that the software of cryptocurrencies exposes them to possible system weaknesses and cyber threats. Related: Japan Urged to Adopt National Bitcoin Strategy to Stay Ahead in Global Finance Meanwhile, environmental issues imposed additional pressure on the SNB during its meeting. Members of Climate Alliance Switzerland protested outside the meeting to demand that the central bank withdraw from financing businesses that contribute to environmental damage. The protest focused on firms that University College London research showed caused sustained ecological destruction in areas like the Amazon rainforest and Brazil’s Cerrado. Asti Roesle from Climate Alliance Switzerland expressed her concern at the shareholders’ meeting, stating that the SNB’s long-term responsibilities are compromised due to neglect of climate risk. She highlighted Switzerland’s evident climate issues, including glacier melt and destructive weather patterns resulting in landslides and economic damage. The referendum initiative requires 100,000 verified signatures to trigger a national vote. If successful, it would mark the first instance globally of mandating a central bank to hold Bitcoin through constitutional reform. Campaigners, including Yves Bennaim of the Bitcoin Initiative group, stressed that a modest 1–2% allocation of the SNB’s nearly 1 trillion Swiss franc reserve could provide a hedge against monetary debasement without significantly increasing volatility risks. Meanwhile, environmental activists pressured the SNB to implement tighter investment guidelines. They campaigned for an investment model resembling Norway’s sovereign wealth fund, which actively works with companies to set climate standards. According to critics, the SNB’s current passive investment strategy complicates environmental degradation despite its policy of excluding companies that cause severe environmental harm. Related: From Defendant to Advisor: Binance Touts New Role Helping Nations Set Crypto Rules The SNB states that its strategic focus prioritizes inflation control and maintaining market neutrality instead of targeting particular sectors. The rising support from cryptocurrency advocates and environmental activists suggests that the SNB’s investment strategy selection debates will escalate in the coming months. Disclaimer: The information presented in this article is for informational and educational purposes only. The article does not constitute financial advice or advice of any kind. Coin Edition is not responsible for any losses incurred as a result of the utilization of content, products, or services mentioned. Readers are advised to exercise caution before taking any action related to the company.

Silent Push researchers claim cyber spies from North Korea’s Lazarus Group, have set up U.S. shell companies under fake aliases to infect crypto developers with malware. According to a recent Reuters report , U.S. cybersecurity company Silent Push has identified two shell companies that can be traced back to the North Korean hacker group. Researchers claimed that the two companies, Blocknovas LLC and Softglide LLC, were set up in New Mexico and New York respectively under fake personas and addresses. Upon further inspection, Reuters found that the address listed for Blocknovas in Warrenville, South Carolina appeared as an empty lot on Google Maps. Meanwhile, Softglide’s address in Buffalo, New York was occupied by a small tax office. Moreover, the contact persons listed under the companies could not be found. Director of threat intelligence at Silent Push, Kasey Best called it a “rare example of North Korean hackers actually managing to set up legal corporate entities in the U.S.” He explained how the Lazarus Group hackers would seek to infect users through fake job applications with at least three strains of detected malware linked to North Korean cyber operations. The malicious cyber attacks would use fake aliases to offer job interviews for prospective crypto or web3 developers, which would enable the hackers to deploy sophisticated malware designed to compromise the cryptocurrency wallets of developers. “They also target the developers’ passwords and credentials which could be used to further attacks on legitimate businesses,” said Best. The hackers behind these firms are allegedly part of a subgroup within the Lazarus Group, which is part of the Reconnaissance General Bureau, Pyongyang’s main foreign intelligence agency. Lazarus Group is known for being the actors behind some of the largest crypto hacks in history, including the most recent Bybit hack which resulted in losses of up to $1.5 billion. When asked about these shell companies and their possible ties to the North Korean hacker group, the New York Department of State declined to comment on companies registered in the state. Meanwhile, the New Mexico secretary of state’s office told Reuters in an email that it has no way of knowing about the firm’s connection to North Korea. On April 24, the FBI posted a domain seizure notice on the Blocknovas website, starting that “as part of a law enforcement action against North Korean Cyber Actors who utilized this domain to deceive individuals with fake job postings and distribute malware.”

Analyzing the risks and challenges associated with $EPT $EPT requires understanding the specific context, which could refer to various assets or projects. Given the potential ambiguity, let's break down common risks and challenges applicable to different domains: Common Risks and Challenges - *Operational Risks*: Disruptions in clinical workflows, loss of productivity, and technical issues with system upgrades or maintenance. - *Financial Risks*: High costs for implementation, maintenance, and training, potentially leading to decreased revenue or increased expenses. - *Security Risks*: Data breaches, unauthorized access, and cyber threats, particularly in IoT or EHR systems. - *Regulatory Risks*: Non-compliance with regulations, such as HIPAA, or federal mandates for electronic health records. - *Human Resource Challenges*: Insufficient training, lack of IT staff, and managing change effectively within an organization ¹ ². Specific Considerations - *Lack of Executive Sponsorship*: Without strong leadership support, projects may struggle with adoption and alignment. - *Inadequate Change Management*: Failing to manage transition effectively can lead to breakdowns and user frustration. - *Undefined Business Needs*: Clearly defining project goals and needs is crucial for success. - *Supply Chain Risks*: Compromises during manufacturing or distribution can introduce vulnerabilities. Mitigation Strategies - *Comprehensive Training*: Providing thorough training for users to ensure smooth adoption. - *Risk Assessment*: Conducting thorough risk assessments to identify potential issues. - *Strong Leadership*: Securing executive sponsorship and leadership support for project success. - *Secure Supply Chain*: Establishing transparent and secure supply chain practices to minimize risks ³ ².$EPT

North Korean hackers Lazarus Group uses US shell companies to recruit crypto developers According to a research report by Silent Push, a sub-team of the North Korean cyber espionage Lazarus Group registered two companies, Blocknovas LLC and Softglide LLC, under false identities in New Mexico and New York, USA, and tricked cryptocurrency developers into downloading malware by posting fake job invitations, thereby stealing wallet credentials and implanting tools needed for subsequent attacks. The FBI has seized the Blocknovas domain name, saying it was used to post fake recruitment information and distribute malware. Kasey Best, director of intelligence at Silent Push, said that such attacks not only target developer wallets, but can also use stolen credentials to further infiltrate legitimate corporate networks. The report pointed out that this method of establishing an entity in the United States to circumvent sanctions violates the sanctions imposed by the US Treasury Department and the United Nations on North Korea. (Reuters)