The Lazarus Group, a North Korean hacking gang, has been detected by cybersecurity firm SlowMist as using LinkedIn to impersonate officials from blockchain asset management company Fenbushi Capital. This tactic is part of a larger effort to launch phishing assaults against blockchain sector professionals.
According to SlowMist, the hackers created a phony LinkedIn account called “Nevil Bolson,” claiming to be a founding partner of Fenbushi. This profile leverages the image of a legitimate Fenbushi partner to increase its reputation and deceive LinkedIn users.
SlowMist’s investigations also suggest that the organization has moved $12 million in Ether through Tornado Cash, a well-known cryptocurrencycurrency mixer, as part of their financial machinations.
The fraudulent operations have recently increased, with Lazarus focusing on personnel with a background in bitcoin and using the social platform as their primary avenue for nefarious activity.
Lazarus targets large decentralized financing (DeFi) projects, inserting malicious URLs disguised as legitimate business queries or event invitations. When these links are visited, phishing attempts begin, posing a severe threat to data security and financial integrity in the blockchain industry.
Read also: Lazarus Hackers Use Fake Job Listings to Target Crypto Organizations