##

The Lazarus Group, a North Korean hacking group, launched a cyberattack dubbed "Operation 99," targeting Web3 and cryptocurrency software developers. The attackers, posing as recruiters, engaged in fake hiring campaigns on platforms like LinkedIn, enticing developers with the lure of project testing and code review to clone GitLab repositories containing malicious code. Once victims fell for the scam, malware was injected into their systems, stealing high-value data such as passwords, API keys, and cryptocurrency wallet information. The operation employed highly obfuscated command-and-control (C2) servers to maintain connectivity and maximize its stealth.