Radiant Capital Hack Linked to DPRK Actor

Radiant Capital alleges that hackers from North Korea orchestrated a $50 million hack on their DeFi protocol. The cybersecurity firm Mandiant identified a DPRK-nexus threat actor behind the attack. The hackers disguised themselves as a trusted former contractor to distribute malware through a fake project file. The malware created a macOS backdoor and communicated with a seemingly harmless domain. Despite following security protocols, the hackers bypassed Tenderly's measures and compromised multiple developer devices. The malicious transactions went undetected due to the seamless deception. Radiant Capital's loss highlights the sophistication of the attack and the need for heightened cybersecurity measures in the DeFi space. The incident serves as a cautionary tale for organizations to remain vigilant against evolving cyber threats.