North Korean ClickFake campaign targets Web3 professionals

A new campaign attributed to the North Korean group Famous Chollima has targeted professionals in the Web3 sector with the ClickFix lure to deploy trojans on Windows and macOS. The mechanism relies on highly targeted social engineering, leveraging an apparently harmless flow that tricks the victim into carrying out dangerous actions. The case is significant because it shows the constant evolution of North Korea-linked operations, which combine fundraising, espionage, and the compromise of crypto-related environments. The choice of targets also indicates a strong focus on assets connected to wallets, identities, and development infrastructure. For defenders, this confirms that Web3 security is not only a matter of code or smart contracts, but also of endpoints and user training. ClickFix campaigns remain effective because they exploit urgency and trust in interface-guided behavior.

Source: Infosecurity Magazine