According to Drift, the Democratic People’s Republic of Korea (DPRK) carried out a months-long, carefully planned social engineering operation that started in the fall of 2025 and culminated in the April 1, 2026, attack that resulted in the theft of $285 million.
A North Korean state-sponsored hacking group known as UNC4736, which is also monitored under the cyptonyms AppleJeus, Citrine Sleet, Golden Chollima, and Gleaming Pisces, was identified by the Solana-based decentralized exchange as “an attack six months in the making,” with medium confidence.
Since at least 2018, the threat actor has targeted the cryptocurrency industry for financial theft. The X_TRADER/3CX supply chain breach in 2023 and the $53 million theft of Radiant Capital, a decentralized finance (DeFi) platform, in October 2024 are its most well-known incidents.
According to Drift’s investigation on Sunday, this relationship is based on both operational read more about $285 Million Drift Hack Traced to Six-Month DPRK Social Engineering Operation
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.