SnatchCrypto is a financially motivated BlueNoroff campaign targeting cryptocurrency startups and the people who manage their assets and business relationships. Active through at least November 2021, operators study a target company's personnel and current discussions, then abuse trusted internal or external communications to deliver highly tailored malicious documents, fake shared-file notices, or other convincing lures. Tracking pixels can confirm that a message was opened before later infection stages proceed, while some related activity has used trojanized cryptocurrency software and backdoored updates. The campaign's objective is to gain access that can facilitate cryptocurrency theft.