There’s another likely North Korean-linked scam hitting developers and their employers, while snarfing up credentials and cryptocurrency – and this one doesn’t even involve embedding IT workers at high-profile tech giants.

A previously unseen phishing crew, suspected to have DPRK ties, sent more than 250 emails to people working in almost 100 organizations, mostly based in the US, over six weeks in April and May. According to security sleuths, it is yet another digital-heist attempt designed to steal cryptocurrency wallets and developers’ credentials.

Proofpoint threat researchers spotted this campaign and tracked the digital thievery as UNK_DeadDrop. 

Like earlier phishing expeditions from the Norks, including the