Digital Warfare Podcast Daily Brief April 29, 2026

The Digital Warfare Podcast · Apr 29, 2026 · 4m

Summary

BlueNoroff, a financially motivated subgroup of North Korea’s Lazarus Group, is targeting cryptocurrency, Web3, and financial-sector professionals with fake Zoom meeting pages, AI-generated content, and fileless PowerShell execution. The attack begins with a spear-phishing email and a Calendly invite, then swaps the expected meeting link for a typo-squatted Zoom page. Victims are shown a fake SDK update prompt that uses clipboard manipulation to run hidden PowerShell commands, install an in-memory C2 beacon, and collect system information. Researchers observed one full compromise…