Intel Name: Slow pisces targets developers with coding challenges and introduces new customized python malware
Date of Scan: April 16, 2025
Impact: High
Summary: Slow Pisces (aka Jade Sleet, TraderTraitor, PUKCHONG) is a North Korean threat group focused on funding the DPRK through crypto-targeted attacks. In a recent campaign, the group posed as employers on LinkedIn, targeting cryptocurrency developers. They sent malware-laced coding challenges that infected victims’ systems. The malware used, dubbed RN Loader and RN Stealer, enabled data theft and system compromise.
