Techub News reports that security organization Ctrl-Alt-Intel stated that threat actors are systematically infiltrating cryptocurrency organizations. They exploit web application vulnerabilities to steal AWS tenant data with valid credentials and exfiltrate proprietary exchange software containing hard-coded keys. Their attack targets span all parts of the cryptocurrency supply chain, from staking platforms to exchange software providers and exchanges themselves. The report indicates that the activity aligns with attack characteristics associated with North Korea, but attribution confidence is medium, and the source of AWS credentials remains unclear.