BlueNoroff uses fake Zoom meetings and fileless PowerShell to target crypto firms
VPN Central [Unofficial]
April 30, 2026
BlueNoroff, a financially motivated subgroup of North Korea’s Lazarus Group, has been linked to a new campaign targeting cryptocurrency and Web3 professionals through fake Zoom meetings. The campaign uses manipulated Calendly invites, typo-squatted Zoom links, fake meeting pages, ClickFix clipboard tricks, and fileless PowerShell malware to compromise Windows systems. Arctic Wolf says one observed attack […]
The post BlueNoroff uses fake Zoom meetings and fileless PowerShell to target crypto firms appeared first on VPN Central.
Discussion in the ATmosphere