Security researchers at Ctrl Alt Intel say a threat group believed to be linked to North Korea carried out coordinated attacks against crypto companies by exploiting the React2Shell flaw and stealing AWS credentials to access cloud systems. The hackers reportedly stole private keys, configuration data, source code, and Docker images tied to staking platforms and exchange providers such as ChainUp, using infrastructure traced to a South Korea-based server, though attribution remains moderate and the source of the compromised credentials is still unknown.
Trust with CoinPedia:
CoinPedia has been delivering accurate and timely cryptocurrency and blockchain updates since 2017. All content is created by our expert panel of analysts and journalists, following strict Editorial Guidelines based on E-E-A-T (Experience, Expertise, Authoritativeness, Trustworthiness). Every article is fact-checked against reputable sources to ensure accuracy, transparency, and reliability. Our review policy guarantees unbiased evaluations when recommending exchanges, platforms, or tools. We strive to provide timely updates about everything crypto & blockchain, right from startups to industry majors.
Investment Disclaimer:
All opinions and insights shared represent the author's own views on current market conditions. Please do your own research before making investment decisions. Neither the writer nor the publication assumes responsibility for your financial choices.
Sponsored and Advertisements:
Sponsored content and affiliate links may appear on our site. Advertisements are marked clearly, and our editorial content remains entirely independent from our ad partners.
