North Korean cybercriminals are embedding new “state-of-the-art” malware within open-source software projects to steal cryptocurrency and sensitive data from developers, marking a significant evolution in their tactics, according to a U.S. cybersecurity firm.

As part of a campaign dubbed “Operation Marstech Mayhem” by security researchers, North Korea’s Lazarus group has introduced a new implant named “Marstech1” with advanced obfuscation capabilities to evade detection, SecurityScorecard said in a report published on Thursday. 

This campaign’s focus on cryptocurrency theft is a hallmark of Lazarus operations, with the group having orchestrated some of the biggest