TechFlow reports, on November 28, according to TechCrunch, Microsoft security researcher James Elliott released a new research report at the Cyberwarcon conference in Washington, stating that North Korean hacking groups have successfully infiltrated "hundreds" of global organizations by masquerading as venture capitalists, recruiters, and remote IT workers, stealing hundreds of millions of dollars in cryptocurrency over the past decade to fund their nuclear weapons program.
The report details activities of two major hacking groups: the group codenamed "Ruby Sleet" targets aerospace and defense companies to steal secrets; the group known as "Sapphire Sleet" pretends to be recruiters and venture capitalists, stealing over $10 million in cryptocurrency within six months. These hackers exploit virtual meeting technical issues as a pretext to trick victims into downloading malware disguised as repair tools.
