2025-03-06
Safe.eth
Investigation Updates and Community Call to Action
#Bybit
#SafeWallet
#UNC4899
UNC4899
"UNC4899, a suspected DPRK-nexus threat actor active since 2022, employs sophisticated social engineering and accesses via supply chain compromise. In 2024, UNC4899 targeted cryptocurrency professionals on social media with job postings for a prominent firm and gained access to Web3 organizations to steal digital assets. UNC4899 has previously conducted supply chain compromises to likely gain arbitrary access for financial gain."
- Mandiant, https://cloud.google.com/blog/topics/threat-intelligence/m-trends-2025/?hl=en
Also known as
| Name | Named by | AKA | First seen | Last seen |
|---|---|---|---|---|
| JadeSleet | Microsoft | TraderTraitor | 2023-07-18 | 2024-10-15 |
| PUKCHONG | UNC4899 | 2024-06-12 | 2024-06-12 | |
| TraderTraitor | USCISA | BlueNoroff | 2022-04-18 | 2025-04-22 |
| UNC4899 | Mandiant | TraderTraitor | 2023-07-24 | 2025-04-24 |