Hackers targeted an employee of a cryptocurrency exchange with a fake job offer in order to plant malware and steal virtual currency. The Lazarus Group, which has ties to the North Korean government, used a fake message about a job that claims it’s protected under GDPR and contains malicious macros. The attackers apparently stole a “substantial” amount of cryptocurrency from the targeted exchange as a result of the spear-phishing attack. Lazarus has been involved in several other thefts from banks and exchanges, including the theft of $81 million from Bangladesh Bank in 2016.”]
Source: https://www.cuinfosecurity.com/lazarus-group-uses-spear-phishing-to-steal-cryptocurrency-a-14898