North Korea's hijack of one of the web's most used open source projects was likely weeks in the making
North Korean hackers pushed out malicious updates to a popular open source project by hacking a top developer's computer in a long-running campaign.
TL;DR
- The cyberattack on the Axios open source project was part of a weeks-long campaign by suspected North Korean hackers.
- Hackers used social engineering, creating a fake company and Slack workspace, to gain the developer's trust and prompt malware download.
- The malicious Axios packages were published on March 31 and potentially infected thousands of systems before being removed.
- Such attacks target open source projects for their widespread use, potentially accessing millions of devices.
- North Korean hackers are a significant cyber threat, blamed for billions in stolen cryptocurrency, often funding the regime's activities.