A North Korean government-backed hacking group targets security researchers who focus on vulnerability and exploit development via social networks. Threat actors create fake Twitter profiles and blogs to build a fake persona as a security researcher. These accounts are then used to contact security researchers via social media, including Twitter, LinkedIn, Telegram, Discord, Keybase, and email. Google has not stated the ultimate goal for these attacks, it was likely to steal undisclosed security vulnerabilities and exploits based on the targeted users. Security researchers who were targeted in this campaign have started to share their experiences.
Source: https://www.bleepingcomputer.com/news/security/north-korean-hackers-are-targeting-security-researchers-with-malware-0-days/