“We observed the campaigns targeting U.S. based organizations spanning news media, IT, cryptocurrency and fintech industries.”
Two North Korean groups shared one Chrome zero-day, CVE-2022-0609, and used it before the February 14 patch. One ran fake job offers. The other went after crypto and fintech. North Korea funds itself by robbing exchanges, and a browser bug is cheaper than a missile test.