North Korean cybercriminals launched a phishing campaign earlier this year targeting software developers at nearly 100 organizations, exploiting widely used coding tools to steal virtual funds and login credentials with little to no user interaction.

The U.S. cybersecurity firm Proofpoint, which tracked the campaign between April and May, said targets spanned cryptocurrency, finance, technology, education and business services sectors across the world, with most of them located in America.

Using tactics reminiscent of previous DPRK social engineering campaigns, the cybercriminal cluster  tracked under the name “UNK_DeadDrop” sought to exploit ordinary developer workflows rather than