In a new twist on social engineering attacks with fake job offers, hackers linked to North Korea’s Lazarus Group used the pretense of European data protection laws to gain access to targeted computers, cybersecurity firm F-Secure warned in a report published on Tuesday. 

While recent Lazarus campaigns aimed to break into defense and aerospace companies, the attack described by F-Secure specifically targeted organizations in the cryptocurrency industry. 

“The group will continue to target organizations within the cryptocurrency vertical while it remains such a profitable pursuit, but may also expand to target supply chain elements of the vertical to increase returns