Security Agency: Suspected North Korean hacker group collaborates to attack cryptocurrency companies to steal keys and cloud assets
Security research organization Ctrl-Alt-Intel disclosed that a group of hackers suspected to be linked to North Korea has targeted staking platforms, exchange software vendors, and cryptocurrency exchanges.
The attackers exploited the React2Shell vulnerability (CVE-2025-55182) and compromised cloud environments using obtained AWS access credentials, enumerating resources such as S3, EC2, RDS, EKS, and ECR, and extracting keys and credentials from Secrets Manager, Terraform files, Kubernetes configurations, and Docker containers. Researchers stated that the attackers downloaded 5 Docker images and stole source code, including components related to ChainUp clients.
The attack infrastructure involved a South Korean server 64.176.226[.]36 and the domain itemnania[.]com. The report indicated that this activity is consistent with North Korean-related attack characteristics, but the attribution confidence level is moderate, and the source of the AWS credentials remains unclear.
You may also like

Ten Thousand Words Interpretation of STRC: Strategy for Making Money to Buy Coins New Magic

What competitive advantages are still defensible in the AI era?

For Whom the Bell Tolls, For Whom the Lobster Feeds? A Dark Forest Survival Guide for the 2026 Agent Player

Circle CEO's Latest Interview: Stablecoins Are Not Cryptocurrency

Deconstructing the Public Chain Pharos Capital Game: Is a $950 million valuation supported by assets like photovoltaics just a shell transaction under layers of betting?

a16z: AI is making everyone 10x more productive, but the true winner has yet to emerge

Why did the star Web3 project Across Protocol choose to abandon DAO?

In fact, ETH scaling is a major benefit for L2

Memories: 10 Key Contributions of the TON Core Team That Few People Knew in the Early Days

2025 South Korea CEX Listing Post-Mortem: Investing in New Coins = 70% Loss?

BIP-360 Analysis: Bitcoin's First Step Towards Quantum Immunity, But Why Only the "First Step"?

50 million USDT exchanged for 35,000 USD AAVE: How did the disaster happen? Who should we blame?

The Cryptographic Past of the Middle East

Resolving the Intergenerational Prisoner's Dilemma: The Inevitable Path of Nomadic Capital Bitcoin

Who Will Control AI? Why Decentralized AI May Be the Only Alternative to Government and Big Tech
AI has become critical infrastructure, and governments and corporations are competing to control it. Centralized development and regulation are entrenching existing power structures. The Web3 community is building a decentralized alternative — distributed compute, token incentives, and community governance — before that window closes.

Vitalik wrote a proposal teaching you how to secretly use AI large models

On the eve of the explosion of on-chain options

WEEX AI Hackathon: How Did This AI Trading Winner Succeed?
A self-taught AI trading enthusiast achieved top-10 results at the WEEX AI Hackathon. Learn about the mindset, AI tools, and lessons behind this impressive performance.