North Korean Lazarus hackers launch large-scale cyberattack by cloning open source software

• Lazarus was seen poisoning open source software with infostealers
• The campaign is dubbed Phantom Circuit, and targets mostly European software devs
• Multiple repositories were found poisoned with malware

The notorious North Korean hackers Lazarus have been targeting software developers, particularly those in the Web3 industry, with infostealing malware, grabbing their credentials, authentication tokens, and other valuable data, experts have warned.

Cybersecurity researchers SecurityScorecard released a report detailing the campaign, which included a software supply-chain attack and open-source poisoning.