[Stanley]

UNC4899 Breached Crypto Firm After Developer AirDropped Trojanized File to Work Devi

The North Korean threat actor known as UNC4899 is suspected to be behind a sophisticated cloud compromise campaign targeting a cryptocurrency organization in 2025 to steal millions of dollars in cryptocurrency.
The activity has been attributed with moderate confidence to the state-sponsored adversary, which is also tracked under the cryptonyms Jade Sleet, PUKCHONG, Slow Pisces, and

https://thehackernews.com/2026/03/unc489...r-and.html

[Null State]

Why you shouldn't be placing files on your employer's machines, and especially without actually looking into what it is you're placing on said machine. It's the same as the old drop a USB drive in the parking lot and see what happens. People need to be more careful with what they open/download, same as it's always been.