North Korea has carried out a large scale data theft operation.

North Korea’s DeceptiveDevelopment campaign uses fake job offers to target cryptocurrency developers, infecting their systems with malware. These attacks also harvest developer identities, which are handed to fraudulent North Korean IT workers posing as legitimate job seekers. The IT workers use stolen or synthetic identities to secure remote jobs in Western countries, including the U.S. and Europe. Malware such as BeaverTail, InvisibleFerret, and Tropidoor has been deployed in these campaigns

Read more:

https://www.securityweek.com/north-koreas-fake-recruiters-feed-stolen-data-to-it-workers/