According to @zachxbt, North Korean hackers are escalating their attacks on the cryptocurrency industry, using a new Python-based malware called PylangGhost disguised in fake job applications. The campaign, attributed to the group Famous Chollima, impersonates major firms like Coinbase and Uniswap to lure crypto professionals into installing the malware, which is designed to steal credentials from over 80 browser extensions, including popular wallets like MetaMask, Phantom, and TronLink, as detailed by Cisco Talos. This activity is part of a larger, alarming trend, with a TRM Labs report indicating that a record $2.1 billion was stolen from crypto platforms in the first half of 2025. North Korean-linked groups are reportedly responsible for $1.6 billion, or 70%, of these losses, highlighting a significant and growing systemic risk for traders and the digital asset ecosystem. The report also notes a strategic shift in attack vectors, with over 80% of stolen funds coming from infrastructure-level breaches like private key theft, which are proving far more lucrative than traditional smart contract exploits.