Threat actors tied to North Korea have been observed targeting
the Web3 and blockchain sectors as part of twin campaigns tracked
as GhostCall and GhostHire. According to Kaspersky, the campaigns
are part of a broader operation called SnatchCrypto that has been
underway since at least 2017. The activity is attributed to a
Lazarus Group sub-cluster called BlueNoroff, which is also known as
APT38,
Read more https://thehackernews.com/2025/10/researchers-expose-ghostcall-and.html

