GhostCall and GhostHire: Inside DPRK’s New Cyber Trap

[johnblockbuster]

Two newly identified campaigns — GhostCall and GhostHire — are pushing the limits of North Korea’s cyber deception.
GhostCall lures crypto executives by posing as investors, while GhostHire targets blockchain engineers with fake coding tests.
Victims are tricked into downloading malware disguised as Zoom or Teams clients, giving attackers full system access.
Kaspersky says both campaigns share management servers and appear to be run under BlueNoroff, the Lazarus Group’s financial hacking arm.