UNC4899 Breached Crypto Firm After Developer AirDropped Trojanized File to Work Device
UNC4899 Breached Crypto Firm After Developer AirDropped Trojanized File to Work Device
09 March 2026
The North Korean threat actor known as UNC4899 is suspected to be behind a sophisticated cloud compromise campaign targeting a cryptocurrency organization in 2025 to steal millions of dollars in cryptocurrency.
The activity has been attributed with moderate confidence to the state-sponsored adversary, which is also tracked under the cryptonyms Jade Sleet, PUKCHONG, Slow Pisces, and