North Korean-backed threat actors from the Lazarus Group have been observed targeting individuals and organizations within the cryptocurrency industry with malware-laced applications. Lazarus threat actors launched a social engineering campaign that successfully persuaded cryptocurrency industry employees to download malicious cryptocurrency applications for both macOS and Windows operating systems. Spear-phishing emails utilized in this campaign were meticulously crafted to lure in IT analysts, system administrators, and other security personnel. These socially engineered correspondences theme themselves around job recruitment for high-paying positions, enticing receiving users to download the infected applications. The applications are trojanized with the “AppleJeus” malware which allows for the theft of cryptocurrency from compromised user’s wallets, which is believed to be funding North Korean activities. It is likely that Lazarus and other allied threat organizations will continue to target users, employees, and companies within the cryptocurrency, gaming, and technology industries to generate funds benefiting North Korea and their interests. CTIX analysts continue to urge users to validate the integrity of email/SMS/instant messaging correspondence prior to downloading any attachments or visiting any links embedded in the message to lessen the possibility of threat actor compromise.