A North Korea-aligned campaign active since at least 2023 that weaponizes job recruitment to target software developers and cryptocurrency sector workers. Attackers masquerade as recruiters on platforms like LinkedIn and GitHub, using fake companies and AI-generated profiles to deliver malware.