North Korea-linked hacker group TraderTraitor launches a new round of attacks using a malicious Terraform project.
46 minutes ago
According to SlowMist, North Korea-linked threat actor TraderTraitor (also known as UNC4899 and Jade Sleet) has launched a new attack, recently infiltrating an Indian IT services firm with no ties to the crypto industry. The attacker posted fake job listings on GitHub, using "technical interview assignments" as bait to phish DevOps and crypto engineers. After victims download the project, a malicious .terraform.lock.hcl file points to a Terraform Provider domain controlled by the attacker. Running `terraform init` triggers the download and execution of the malicious Provider module. The attack deploys Rust/ARM64 backdoors FLATROOF and ROOFDECK on victims’ macOS devices; these two malware families were previously used in LayerZero attacks. They can steal credentials and sensitive data, execute shell commands, collect and exfiltrate files, and gain access to cloud services and code repositories. SlowMist warns that TraderTraitor’s latest targets are no longer limited to the crypto sector—the attacker may now be focusing on developers’ access to cloud and API services including AWS, GCP, OVH, and OpenStack. Enterprises should exercise caution when handling unfamiliar Terraform Providers and code repositories from recruiters, and avoid using personal or work devices to run unvetted interview projects.
Muse divides e-commerce giants into two camps: Amazon bans crypto-related operations, Shopify embraces them.
3 minutes ago
U.S. spot Ethereum ETFs saw a net inflow of $270 million yesterday.
3 minutes ago
Cardano has joined the x402 software suite, positioning itself for AI agent payments.
3 minutes ago
JPMorgan Chase CEO: Global AI infrastructure spending likely to exceed $1 trillion by 2027
3 minutes ago
Veteran meme coins rallied across the board, with Dogecoin (DOGE) surging over 18% and Pepe (PEPE) jumping more than 32%.
3 minutes ago
Goldman Sachs: AI pushes the supply of cultural and entertainment content toward near-unlimited levels, while the value of the production segment may remain under pressure.
3 minutes ago
Hot feeds
A trader profits $448K by monitoring #Binance's new listings!
2024.12.13 17:37:29
Last week, funds have flowed into #Bitcoin, #Ethereum, and #Hyperliquid.
2024.12.16 14:48:36
A $PEPE whale that had been dormant for 600 days transferred all 2.1T $PEPE($52M) to a new address.
2024.12.14 10:35:27
When Elon Musk tweeted about Moltbook, the meme coin MOLT experienced a short-term 30% price surge, hitting a new all-time high of $114 million.
2026.01.31 18:37:29
A smart #AI coin trader made $17.6M on $GOAT, $ai16z, $Fartcoin,$arc.
2025.01.05 16:05:18
A sniper earned 2,277 $ETH ($8.3M) trading $SHIRO within 18 hours!
2024.12.03 23:09:08
MoreHot Articles

How did I turn $1,000 into $30,000 with smart money?
2024.12.09

10 promising AI Agent cryptos
2024.12.05

The 30-Year-Old Entrepreneur Behind Virtual, a Multi-Million Dollar AI Agent Society
2025.01.22

10 smart traders specializing in MEMEcoin trading on Solana
2024.12.09

A trader lost $73.9K trading memecoins in just 3 minutes — a lesson for us all!
2024.12.13

What is $SPORE? Let us take you through the on-chain records to show you how it works.
2024.12.25

