TGTGInsighttelegram intelligenceLIVE / telegram public index
TGINSIGHT POST
Post #8560
@thehackernews
The Hacker News
Post content
Post content
🚨 North Korea’s UNC4899 breached a crypto firm via AirDrop from a develop’s device. A poisoned archive ran a fake Kubernetes CLI, opened a backdoor, pivoted into Google Cloud, exposed CI/CD tokens & reset accounts to steal millions. 🔗 Read → https://thehackernews.com/2026/03/unc4899-used-airdrop-file-transfer-and.html