US shares info on North Korean malware used to steal cryptocurrency By 10:25 AM The FBI, CISA, and US Department of Treasury shared detailed info on malicious and fake crypto-trading applications used by North Korean-backed state hackers to steal cryptocurrency from individuals and companies worldwide in a joint advisory published on Wednesday. These cryptocurrency trading apps were developed and injected with AppleJeus malware by a DPRK state-sponsored threat actor known as Lazarus Group (tracked by the U.S. as HIDDEN COBRA). "These cyber actors have targeted organizations for cryptocurrency theft in over 30 countries during the past year alone," the advisory reads.