$285 Million Drift Hack Traced to Six-Month DPRK Social Engineering Operation

Drift's $285M hack on April 1, 2026 was a six-month DPRK social engineering operation by group UNC4736.

• •Attackers posed as a trading firm, building rapport at crypto conferences from fall 2025.
• •Attack vectors: a malicious VS Code tasks.json project and a fake wallet app via Apple TestFlight.
• •In-person meetings used third-party intermediaries with fabricated professional identities.
• •UNC4736 also executed the 3CX supply chain breach (2023) and $53M Radiant Capital hack (2024).

This summary was automatically generated by AI based on the original article and may not be fully accurate.