{"id":4120,"date":"2026-02-12T16:00:00","date_gmt":"2026-02-12T10:30:00","guid":{"rendered":"https:\/\/tradebrains.in\/crypto\/?p=4120"},"modified":"2026-02-12T13:02:36","modified_gmt":"2026-02-12T07:32:36","slug":"google-cloud-flags-north-korea-linked-crypto-malware-campaign","status":"publish","type":"post","link":"https:\/\/tradebrains.in\/crypto\/google-cloud-flags-north-korea-linked-crypto-malware-campaign\/","title":{"rendered":"Google Cloud Flags North Korea-Linked Crypto Malware Campaign"},"content":{"rendered":"\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p><strong><em>Synopsis:<\/em><\/strong><em> Google Cloud warns of North Korea-linked hackers using AI deepfakes and seven malware types to target crypto firms. Fake video calls trick victims into installing theft tools.<\/em><\/p>\n<\/blockquote>\n\n\n\n<p>Cybercriminals with ties to North Korea are launching sophisticated attacks against cryptocurrency companies. These threat actors are using artificial intelligence to make their schemes more convincing. The attacks combine fake video calls and malicious software to steal digital assets.<\/p><div class=\"trade-delta\" style=\"margin-left: auto;margin-right: auto;text-align: center;\" id=\"trade-3203682983\"><a href=\"https:\/\/tradebrains.in\/get\/coindcxfg\/\" aria-label=\"coindcx ads\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/tradebrains-wp.s3.ap-south-1.amazonaws.com\/crypto\/wp-content\/uploads\/2025\/11\/coindcx.webp\" alt=\"coindcx ads\"  srcset=\"https:\/\/tradebrains-wp.s3.ap-south-1.amazonaws.com\/crypto\/wp-content\/uploads\/2025\/11\/coindcx.webp 500w, https:\/\/tradebrains-wp.s3.ap-south-1.amazonaws.com\/crypto\/wp-content\/uploads\/2025\/11\/coindcx-480x480.webp 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) 500px, 100vw\" width=\"350\" height=\"350\"  style=\"display: inline-block;\" \/><\/a><\/div>\n\n\n\n<p>Google Cloud&#8217;s security team has identified a major escalation in these criminal operations. The attackers target cryptocurrency firms, fintech companies, and blockchain developers. Their methods have become more advanced since they started using AI tools.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-hackers-deploy-seven-malware-families-in-single-attack\"><strong>Hackers Deploy Seven Malware Families in Single Attack<\/strong><\/h2>\n\n\n\n<p>Mandiant researchers uncovered a disturbing trend in recent investigations. A threat group called UNC1069 deployed seven different malware families during one intrusion. This represents a significant expansion of their criminal toolkit.<\/p><div class=\"trade-coindcx-3\" style=\"margin-left: auto;margin-right: auto;text-align: center;\" id=\"trade-4293141300\"><script data-cfasync=\"false\" type=\"text\/javascript\" id=\"clever-core\">\r\n\/* <![CDATA[ *\/\r\n    (function (document, window) {\r\n        var a, c = document.createElement(\"script\"), f = window.frameElement;\r\n\r\n        c.id = \"CleverCoreLoader101144\";\r\n        c.src = \"https:\/\/scripts.cleverwebserver.com\/fbda060f29d5b8e8c653abce4ac69b7b.js\";\r\n\r\n        c.async = !0;\r\n        c.type = \"text\/javascript\";\r\n        c.setAttribute(\"data-target\", window.name || (f && f.getAttribute(\"id\")));\r\n        c.setAttribute(\"data-callback\", \"put-your-callback-function-here\");\r\n        c.setAttribute(\"data-callback-url-click\", \"put-your-click-macro-here\");\r\n        c.setAttribute(\"data-callback-url-view\", \"put-your-view-macro-here\");\r\n\r\n        try {\r\n            a = parent.document.getElementsByTagName(\"script\")[0] || document.getElementsByTagName(\"script\")[0];\r\n        } catch (e) {\r\n            a = !1;\r\n        }\r\n\r\n        a || (a = document.getElementsByTagName(\"head\")[0] || document.getElementsByTagName(\"body\")[0]);\r\n        a.parentNode.insertBefore(c, a);\r\n    })(document, window);\r\n\/* ]]> *\/\r\n<\/script>\r\n<div class=\"clever-core-ads\"><\/div><\/div>\n\n\n\n<p>The malware includes newly discovered viruses named CHROMEPUSH and DEEPBREATH. These programs steal browser data, login credentials, and session tokens. Additionally, they harvest information from messaging apps and password managers.<\/p>\n\n\n\n<p>The attackers also use SILENCELIFT to capture victim data silently. Other tools in their arsenal include SUGARLOADER, WAVESHAPER, and HYPERCALL. Each malware serves a specific purpose in the theft chain.<\/p><div class=\"trade-content\" style=\"margin-left: auto;margin-right: auto;text-align: center;\" id=\"trade-498808406\"><a href=\"https:\/\/tradebrains.in\/get\/delta\/\" aria-label=\"Delta Exchange Ads\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/tradebrains-wp.s3.ap-south-1.amazonaws.com\/crypto\/wp-content\/uploads\/2025\/11\/Delta-Exchange-5-1-1.png\" alt=\"Delta Exchange Ads\"  srcset=\"https:\/\/tradebrains-wp.s3.ap-south-1.amazonaws.com\/crypto\/wp-content\/uploads\/2025\/11\/Delta-Exchange-5-1-1.png 500w, https:\/\/tradebrains-wp.s3.ap-south-1.amazonaws.com\/crypto\/wp-content\/uploads\/2025\/11\/Delta-Exchange-5-1-1-480x480.png 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) 500px, 100vw\" width=\"350\" height=\"350\"  style=\"display: inline-block;\" \/><\/a><\/div>\n\n\n\n<p>Mandiant has tracked this North Korean group since 2018. However, their capabilities expanded dramatically in November 2025. That&#8217;s when they began incorporating AI-generated content into their attacks.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-ai-powered-deepfakes\"><strong>AI-Powered Deepfakes<\/strong><\/h2>\n\n\n\n<p>The criminals use artificial intelligence to create realistic fake videos. These deepfakes impersonate legitimate cryptocurrency executives and investors. Victims receive meeting invitations through compromised Telegram accounts.<\/p>\n\n\n\n<p>During fake Zoom calls, attackers display AI-generated video feeds. They claim to experience audio or video problems. Then they direct victims to run &#8220;troubleshooting commands&#8221; on their computers.<\/p>\n\n\n\n<p>These commands contain hidden malicious code. Once executed, they download additional malware onto the victim&#8217;s system. The infection happens quickly and quietly.<\/p>\n\n\n\n<p>The social engineering tactics have become remarkably sophisticated. Attackers first build trust by posing as known contacts. They research their targets thoroughly before making contact. Furthermore, the AI-generated videos appear genuine at first glance.<\/p>\n\n\n\n<p>This ClickFix attack method tricks even experienced technology professionals. The commands look like normal technical fixes. Victims don&#8217;t realize they&#8217;re installing malware until it&#8217;s too late.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p><em><strong>Also Read: <a href=\"https:\/\/tradebrains.in\/crypto\/crypto-com-ceo-unveils-ai-agents-for-crypto-apps-wallets-at-super-bowl-lix\/\">Crypto.com CEO Unveils AI Agents for Crypto Apps &amp; Wallets at Super Bowl LIX<\/a><\/strong><\/em><\/p>\n<\/blockquote>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-cryptocurrency-companies-face-mounting-threats\"><strong>Cryptocurrency Companies Face Mounting Threats<\/strong><\/h2>\n\n\n\n<p>North Korean threat actors primarily target cryptocurrency and blockchain businesses. They also focus on software developers and venture capital firms. The attacks aim to steal digital assets and sensitive financial information.<\/p>\n\n\n\n<p>The malware extracts data from multiple sources on infected systems. It captures browser cookies, saved passwords, and autofill information. Moreover, it steals Telegram session data and Apple Notes content.<\/p>\n\n\n\n<p>Attackers use stolen credentials to access cryptocurrency wallets directly. They also leverage compromised accounts for future social engineering campaigns. This creates a cycle of ongoing criminal activity.<\/p>\n\n\n\n<p>In June 2025, four North Korean operatives infiltrated crypto firms as freelance developers. They stole $900,000 from multiple startups. Earlier that year, the Lazarus Group executed a $1.4 billion hack of Bybit exchange.<\/p>\n\n\n\n<p>These incidents demonstrate the persistent threat North Korean actors pose. They continuously adapt their methods to exploit new vulnerabilities. Consequently, cryptocurrency companies must remain vigilant.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-defenses-against-ai-enhanced-attacks\"><strong>Defenses Against AI-Enhanced Attacks<\/strong><\/h2>\n\n\n\n<p>Security experts recommend several protective measures for cryptocurrency firms. Companies should train employees to recognize suspicious meeting invitations. Staff must never run unsolicited commands from external sources.<\/p>\n\n\n\n<p>Organizations need robust endpoint detection systems. These tools can identify unusual processes and data exfiltration attempts. Regular security audits help identify potential vulnerabilities.<\/p>\n\n\n\n<p>Telegram users should enable all available security features. Multi-factor authentication adds an important layer of protection. Companies should verify contact identities through secondary channels before joining meetings.<\/p>\n\n\n\n<p>The rise of AI-generated deepfakes makes verification more critical. Trust but verify should be every organization&#8217;s motto. Simple confirmation calls can prevent devastating breaches.<\/p>\n\n\n\n<p>Mandiant continues monitoring UNC1069&#8217;s activities closely. The Google Cloud security team provides updated threat intelligence regularly. Organizations can use this information to strengthen their defenses.<\/p>\n\n\n\n<p>The cryptocurrency industry faces an evolving threat landscape. North Korean actors will likely continue refining their techniques. Therefore, constant vigilance and updated security practices remain essential for protection.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p><em>Written By Fazal Ul Vahab C H<\/em><\/p>\n<\/blockquote>\n<div class=\"trade-after-content\" id=\"trade-305439675\"><div id=\"taboola-below-article-thumbnails\"><\/div>\r\n<script type=\"text\/javascript\">\r\n  window._taboola = window._taboola || [];\r\n  _taboola.push({\r\n    mode: 'alternating-thumbnails-a',\r\n    container: 'taboola-below-article-thumbnails',\r\n    placement: 'Below Article Thumbnails',\r\n    target_type: 'mix'\r\n  });\r\n<\/script>\r\n<script type=\"text\/javascript\">\r\n  window._taboola = window._taboola || [];\r\n  _taboola.push({flush: true});\r\n<\/script><\/div>","protected":false},"excerpt":{"rendered":"<p>Synopsis: Google Cloud warns of North Korea-linked hackers using AI deepfakes and seven malware types to target crypto firms. Fake video calls trick victims into installing theft tools. Cybercriminals with ties to North Korea are launching sophisticated attacks against cryptocurrency companies. These threat actors are using artificial intelligence to make their schemes more convincing. The [&hellip;]<\/p>\n","protected":false},"author":9,"featured_media":4123,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"off","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[7,3],"tags":[4688,1072,3203,4691,3698,4689,2760,4685,4687,4690,4684,2755,4686],"ppma_author":[3374],"class_list":["post-4120","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blockchain","category-trending-news","tag-ai-deepfake-crypto-scam","tag-blockchain-security","tag-crypto-cybercrime","tag-crypto-firms-targeted","tag-crypto-hacking","tag-crypto-malware-campaign","tag-digital-asset-security","tag-google-cloud-warning","tag-lazarus-group","tag-malware-in-crypto","tag-north-korea-crypto-attack","tag-north-korean-hackers","tag-unc1069"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.3 (Yoast SEO v26.3) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Google Cloud Flags North Korea-Linked Crypto Malware Campaign - Trade Brains Crypto<\/title>\n<meta name=\"description\" content=\"Google Cloud warns of North Korea-linked hackers using AI deepfakes and advanced malware to target crypto firms. Learn how the attacks work and how to stay safe.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/tradebrains.in\/crypto\/google-cloud-flags-north-korea-linked-crypto-malware-campaign\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Google Cloud Flags North Korea-Linked Crypto Malware Campaign\" \/>\n<meta property=\"og:description\" content=\"Google Cloud warns of North Korea-linked hackers using AI deepfakes and advanced malware to target crypto firms. Learn how the attacks work and how to stay safe.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/tradebrains.in\/crypto\/google-cloud-flags-north-korea-linked-crypto-malware-campaign\/\" \/>\n<meta property=\"og:site_name\" content=\"Trade Brains Crypto\" \/>\n<meta property=\"article:published_time\" content=\"2026-02-12T10:30:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/tradebrains-wp.s3.ap-south-1.amazonaws.com\/crypto\/wp-content\/uploads\/2026\/02\/4k-60-FPS-2026-02-12T125516-compressed.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"854\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Fazal Ul Vahab C H\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fazal Ul Vahab C H\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/tradebrains.in\/crypto\/google-cloud-flags-north-korea-linked-crypto-malware-campaign\/\",\"url\":\"https:\/\/tradebrains.in\/crypto\/google-cloud-flags-north-korea-linked-crypto-malware-campaign\/\",\"name\":\"Google Cloud Flags North Korea-Linked Crypto Malware Campaign - Trade Brains Crypto\",\"isPartOf\":{\"@id\":\"https:\/\/tradebrains.in\/crypto\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/tradebrains.in\/crypto\/google-cloud-flags-north-korea-linked-crypto-malware-campaign\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/tradebrains.in\/crypto\/google-cloud-flags-north-korea-linked-crypto-malware-campaign\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/tradebrains-wp.s3.ap-south-1.amazonaws.com\/crypto\/wp-content\/uploads\/2026\/02\/4k-60-FPS-2026-02-12T125516-compressed.jpg\",\"datePublished\":\"2026-02-12T10:30:00+00:00\",\"author\":{\"@id\":\"https:\/\/tradebrains.in\/crypto\/#\/schema\/person\/3ba81b6f10b02839877028492165d9c8\"},\"description\":\"Google Cloud warns of North Korea-linked hackers using AI deepfakes and advanced malware to target crypto firms. Learn how the attacks work and how to stay safe.\",\"breadcrumb\":{\"@id\":\"https:\/\/tradebrains.in\/crypto\/google-cloud-flags-north-korea-linked-crypto-malware-campaign\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/tradebrains.in\/crypto\/google-cloud-flags-north-korea-linked-crypto-malware-campaign\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/tradebrains.in\/crypto\/google-cloud-flags-north-korea-linked-crypto-malware-campaign\/#primaryimage\",\"url\":\"https:\/\/tradebrains-wp.s3.ap-south-1.amazonaws.com\/crypto\/wp-content\/uploads\/2026\/02\/4k-60-FPS-2026-02-12T125516-compressed.jpg\",\"contentUrl\":\"https:\/\/tradebrains-wp.s3.ap-south-1.amazonaws.com\/crypto\/wp-content\/uploads\/2026\/02\/4k-60-FPS-2026-02-12T125516-compressed.jpg\",\"width\":1280,\"height\":854},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/tradebrains.in\/crypto\/google-cloud-flags-north-korea-linked-crypto-malware-campaign\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/tradebrains.in\/crypto\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Google Cloud Flags North Korea-Linked Crypto Malware Campaign\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/tradebrains.in\/crypto\/#website\",\"url\":\"https:\/\/tradebrains.in\/crypto\/\",\"name\":\"Trade Brains Crypto\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/tradebrains.in\/crypto\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/tradebrains.in\/crypto\/#\/schema\/person\/3ba81b6f10b02839877028492165d9c8\",\"name\":\"Fazal Ul Vahab C H\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/tradebrains.in\/crypto\/#\/schema\/person\/image\/67235575d941f1cd7c7164e83dfb5666\",\"url\":\"https:\/\/tradebrains-wp.s3.ap-south-1.amazonaws.com\/crypto\/wp-content\/uploads\/2026\/01\/Fazal.jpg\",\"contentUrl\":\"https:\/\/tradebrains-wp.s3.ap-south-1.amazonaws.com\/crypto\/wp-content\/uploads\/2026\/01\/Fazal.jpg\",\"caption\":\"Fazal Ul Vahab C H\"},\"description\":\"Financial analyst with over 1.5+ years of experience covering equity markets, cryptocurrencies, and IPOs, and has authored more than 1,600+ in-depth articles. His coverage spans publicly listed companies, crypto markets, geopolitical developments, and currency trends. In addition, he has led content development for cryptocurrency platforms, creating educational material on blockchain, DeFi, and NFTs.\",\"url\":\"https:\/\/tradebrains.in\/crypto\/author\/fazal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Google Cloud Flags North Korea-Linked Crypto Malware Campaign - Trade Brains Crypto","description":"Google Cloud warns of North Korea-linked hackers using AI deepfakes and advanced malware to target crypto firms. Learn how the attacks work and how to stay safe.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/tradebrains.in\/crypto\/google-cloud-flags-north-korea-linked-crypto-malware-campaign\/","og_locale":"en_US","og_type":"article","og_title":"Google Cloud Flags North Korea-Linked Crypto Malware Campaign","og_description":"Google Cloud warns of North Korea-linked hackers using AI deepfakes and advanced malware to target crypto firms. Learn how the attacks work and how to stay safe.","og_url":"https:\/\/tradebrains.in\/crypto\/google-cloud-flags-north-korea-linked-crypto-malware-campaign\/","og_site_name":"Trade Brains Crypto","article_published_time":"2026-02-12T10:30:00+00:00","og_image":[{"width":1280,"height":854,"url":"https:\/\/tradebrains-wp.s3.ap-south-1.amazonaws.com\/crypto\/wp-content\/uploads\/2026\/02\/4k-60-FPS-2026-02-12T125516-compressed.jpg","type":"image\/jpeg"}],"author":"Fazal Ul Vahab C H","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Fazal Ul Vahab C H","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/tradebrains.in\/crypto\/google-cloud-flags-north-korea-linked-crypto-malware-campaign\/","url":"https:\/\/tradebrains.in\/crypto\/google-cloud-flags-north-korea-linked-crypto-malware-campaign\/","name":"Google Cloud Flags North Korea-Linked Crypto Malware Campaign - Trade Brains Crypto","isPartOf":{"@id":"https:\/\/tradebrains.in\/crypto\/#website"},"primaryImageOfPage":{"@id":"https:\/\/tradebrains.in\/crypto\/google-cloud-flags-north-korea-linked-crypto-malware-campaign\/#primaryimage"},"image":{"@id":"https:\/\/tradebrains.in\/crypto\/google-cloud-flags-north-korea-linked-crypto-malware-campaign\/#primaryimage"},"thumbnailUrl":"https:\/\/tradebrains-wp.s3.ap-south-1.amazonaws.com\/crypto\/wp-content\/uploads\/2026\/02\/4k-60-FPS-2026-02-12T125516-compressed.jpg","datePublished":"2026-02-12T10:30:00+00:00","author":{"@id":"https:\/\/tradebrains.in\/crypto\/#\/schema\/person\/3ba81b6f10b02839877028492165d9c8"},"description":"Google Cloud warns of North Korea-linked hackers using AI deepfakes and advanced malware to target crypto firms. Learn how the attacks work and how to stay safe.","breadcrumb":{"@id":"https:\/\/tradebrains.in\/crypto\/google-cloud-flags-north-korea-linked-crypto-malware-campaign\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/tradebrains.in\/crypto\/google-cloud-flags-north-korea-linked-crypto-malware-campaign\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/tradebrains.in\/crypto\/google-cloud-flags-north-korea-linked-crypto-malware-campaign\/#primaryimage","url":"https:\/\/tradebrains-wp.s3.ap-south-1.amazonaws.com\/crypto\/wp-content\/uploads\/2026\/02\/4k-60-FPS-2026-02-12T125516-compressed.jpg","contentUrl":"https:\/\/tradebrains-wp.s3.ap-south-1.amazonaws.com\/crypto\/wp-content\/uploads\/2026\/02\/4k-60-FPS-2026-02-12T125516-compressed.jpg","width":1280,"height":854},{"@type":"BreadcrumbList","@id":"https:\/\/tradebrains.in\/crypto\/google-cloud-flags-north-korea-linked-crypto-malware-campaign\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/tradebrains.in\/crypto\/"},{"@type":"ListItem","position":2,"name":"Google Cloud Flags North Korea-Linked Crypto Malware Campaign"}]},{"@type":"WebSite","@id":"https:\/\/tradebrains.in\/crypto\/#website","url":"https:\/\/tradebrains.in\/crypto\/","name":"Trade Brains Crypto","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/tradebrains.in\/crypto\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/tradebrains.in\/crypto\/#\/schema\/person\/3ba81b6f10b02839877028492165d9c8","name":"Fazal Ul Vahab C H","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/tradebrains.in\/crypto\/#\/schema\/person\/image\/67235575d941f1cd7c7164e83dfb5666","url":"https:\/\/tradebrains-wp.s3.ap-south-1.amazonaws.com\/crypto\/wp-content\/uploads\/2026\/01\/Fazal.jpg","contentUrl":"https:\/\/tradebrains-wp.s3.ap-south-1.amazonaws.com\/crypto\/wp-content\/uploads\/2026\/01\/Fazal.jpg","caption":"Fazal Ul Vahab C H"},"description":"Financial analyst with over 1.5+ years of experience covering equity markets, cryptocurrencies, and IPOs, and has authored more than 1,600+ in-depth articles. His coverage spans publicly listed companies, crypto markets, geopolitical developments, and currency trends. In addition, he has led content development for cryptocurrency platforms, creating educational material on blockchain, DeFi, and NFTs.","url":"https:\/\/tradebrains.in\/crypto\/author\/fazal\/"}]}},"authors":[{"term_id":3374,"user_id":9,"is_guest":0,"slug":"fazal","display_name":"Fazal Ul Vahab C H","avatar_url":{"url":"https:\/\/tradebrains-wp.s3.ap-south-1.amazonaws.com\/crypto\/wp-content\/uploads\/2026\/01\/Fazal.jpg","url2x":"https:\/\/tradebrains-wp.s3.ap-south-1.amazonaws.com\/crypto\/wp-content\/uploads\/2026\/01\/Fazal.jpg"},"author_category":"1","first_name":"Fazal","last_name":"Ul Vahab C H","user_url":"","job_title":"Financial Analyst","description":"Financial analyst with over 1.5+ years of experience covering equity markets, cryptocurrencies, and IPOs, and has authored more than 1,600+ in-depth articles. His coverage spans publicly listed companies, crypto markets, geopolitical developments, and currency trends. In addition, he has led content development for cryptocurrency platforms, creating educational material on blockchain, DeFi, and NFTs."}],"_links":{"self":[{"href":"https:\/\/tradebrains.in\/crypto\/wp-json\/wp\/v2\/posts\/4120","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tradebrains.in\/crypto\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tradebrains.in\/crypto\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tradebrains.in\/crypto\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/tradebrains.in\/crypto\/wp-json\/wp\/v2\/comments?post=4120"}],"version-history":[{"count":2,"href":"https:\/\/tradebrains.in\/crypto\/wp-json\/wp\/v2\/posts\/4120\/revisions"}],"predecessor-version":[{"id":4122,"href":"https:\/\/tradebrains.in\/crypto\/wp-json\/wp\/v2\/posts\/4120\/revisions\/4122"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tradebrains.in\/crypto\/wp-json\/wp\/v2\/media\/4123"}],"wp:attachment":[{"href":"https:\/\/tradebrains.in\/crypto\/wp-json\/wp\/v2\/media?parent=4120"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tradebrains.in\/crypto\/wp-json\/wp\/v2\/categories?post=4120"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tradebrains.in\/crypto\/wp-json\/wp\/v2\/tags?post=4120"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/tradebrains.in\/crypto\/wp-json\/wp\/v2\/ppma_author?post=4120"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}