A new variation of the fake recruiter campaign from North Korean threat actors is targeting JavaScript and Python developers with cryptocurrency-related tasks.

The activity has been ongoing since at least May 2025 and is characterized by modularity, which allows the threat actor to quickly resume it in case of partial compromise.

The bad actor relies on packages published on the npm and PyPi registries that act as downloaders for a remote access trojan (RAT). In total, researchers found 192 malicious packages related to this campaign, which they dubbed ‘Graphalgo’.

Researchers at software supply-chain security company ReversingLabs say that the threat actor creates fake companies in the blockchain and crypto-trading sectors and publishes job offerings on various platforms, like LinkedIn, Facebook, and Reddit.

Developers applying for the job are required to show their skills by running, debugging, and improving a given project. However, the attacker’s purpose is to make the applicant run the code.

This action would cause a malicious dependency from a legitimate repository to be installed and executed.

“It is easy to create such job task repositories. Threat actors simply need to take a legitimate bare-bone project and fix it up with a malicious dependency and it is ready to be served to targets,” the researchers say.

To hide the malicious nature of the dependencies, the hackers host the dependencies on legitimate platforms, like npm and PyPi.

In one case highlighted in the ReversingLabs report, a package named ‘bigmathutils,’ with 10,000 downloads, was benign until it reached version 1.1.0, which introduced malicious payloads. Shortly after, the threat actor removed the package, marking it as deprecated, likely to conceal the activity.

The Graphalgo name of the campaign is derived from packages that have “graph” in their name. They typically impersonate legitimate, popular libraries like graphlib, the researchers say.

However, from December 2025 onward, the North Korean actor shifted to packages with “big” in their name. However, ReversingLabs has not discovered the recruiting part, or the campaign frontend, related to them.

According to the researchers, the actor uses Github Organizations, which are shared accounts for collaboration across multiple projects. They say that the GitHub repositories are clean, and malicious code is introduced indirectly via dependencies hosted on npm and PyPI, which are the Graphalgo packages.

Victims running the project as instructed in the interview infect their systems with these packages, which install a RAT payload on their machines.

It is worth noting that ReversingLabs researchers identified several developers that fell for the trick and contacted them for more details about the recruiting process.

The RAT can list the running processes on the host, execute arbitrary commands per instructions from the command-and-control (C2) server, and exfiltrate files or drop additional payloads.

The RAT checks whether the MetaMask cryptocurrency extension is installed on the victim’s browser, a clear indication of its money-stealing goals.

Its C2 communication is token-protected to lock out unauthorized observers, a common tactic for North Korean hackers.

ReversingLabs has found multiple variants written in JavaScript, Python, and VBS, showing an intention to cover all possible targets.

The researchers’ attribute the Graphalgo fake recruiter campaign to the Lazarus group with medium-to-high confidence. The conclusion is based on the approach, the use of coding tests as an infection vector, and the cryptocurrency-focused targeting, all of which aligning with previous activity associated with the North Korean threat actor.

Also, the researchers note the delayed activation of malicious code in the packages, consistent with Lazarus’ patience displayed in other attacks. Finally, the Git commits show the GMT +9 time zone, matching North Korea time.

The complete indicators of compromise (IoCs) are available in the original report. Developers who installed the malicious packages at any point should rotate all tokens and account passwords and reinstall their OS.

Modern IT infrastructure moves faster than manual workflows can handle.

In this new Tines guide, learn how your team can reduce hidden manual delays, improve reliability through automated response, and build and scale intelligent workflows on top of tools you already use.

Get the guide

Sony’s recent State of Play event revealed that the Unbreakable X-Men are joining Marvel Tōkon: Fighting Souls. Arc System Works, the company behind the recent Guilty Gear successes, has stated that their next major item will be released on PS5 and PC on August 6, 2026. Pre-orders begin on February 19th on the PlayStation Store and certain retailers.

The new X-Men squad taking center stage is a line-up put together by Charles Xavier, who reminds the team to go retrieve some of the rest of the original crew, notably Magik, Wolverine, and Danger. They want to save the planet from a catastrophic threat, but the majority of humanity is still frightened of these mutant-types. Producer Takeshi Yamanaka suggests that things won’t be easy: “We’re really hoping you’ll be fascinated about the harsh choices the crew will have to make, and how their story pans out.”

Wolverine arrives with huge claws to bash his way through the competition, while Magik is granted a Soulsword that allows her to tap into otherworldly powers such as magic gateways and summoned demons. Danger, the AI formed during the X-Men’s training sessions, has gotten herself inside a quite advanced-looking mech and is ready to work. Then there’s Storm, who has a combination of wind and lightning at her disposal, which should give her a slight advantage, but as team captain, the true beauty of this squad is that each member contributes something unique to the table.

When the game is released on August 6th, you can expect 20 fighters right away, including teams like the X-Men unit we just mentioned, the Avengers with Captain America at the helm, the villain crew led by some pretty powerful foes like Doctor Doom, and even the odd couple of Ghost Rider and Spider-Man, who will both take charge at some point. Of course, there are additional teams that have yet to be announced. The 4v4 tag-team mode allows you to swap in friends mid-fight, and the combination of Arc’s tight controls with Marvel’s explosive powers promises to be a crazy ride. And for those that enjoy multiplayer, you’ll be able to join forces with dozens of other players online, resulting in unending rivalries.

When it comes to the single-player experience, Episode Mode introduces a completely new storyline. Arc System has created a series of motion comics with voice acting in ten different languages, drawing on a blend of American comic books and Japanese manga. The PS5’s spatial audio is incredible, and the DualSense controller makes every impact feel like it’s hitting directly in your lap. According to producer Yamanaka, this will be a new way to experience the Marvel universe, unlike anything seen in books or films and only feasible due of the games.

Finally, there are several special editions, and they provide some great alternatives for collectors. The standard edition costs $59.99 and includes the base game. If you want to go all in, the Digital Deluxe edition costs $84.99 and includes the game as well as a slew of post-launch bonuses such as four new characters, a brand new stage, a Howard the Duck skin, and even a Cosmo pet. The top-tier Ultimate Edition costs $99.99 and includes some very sweet-looking costumes for several of the characters, including Spider-Man’s beautiful new suit.

Samsung appears to be laying the groundwork for its next major software update well ahead of schedule, with early signs of One UI 9 development surfacing alongside next-generation foldable hardware testing. While the tech giant is still gearing up for the imminent launch of the Galaxy S26 series – expected to debut One UI 8.5 – sightings of internal One UI 9 builds for upcoming devices hint at a broader strategy to align new software with future hardware releases.

One UI 9 has already been spotted running on early test firmware tied to the Galaxy Z Flip 8 and Galaxy Z Fold 8, indicating that software preparations are actively underway. These early builds, identified by firmware tags such as F776USQU0AZB1 for the Flip and F976USQU0AZB1 for the Fold, suggest Samsung is pushing One UI 9 testing internally even as it finalises One UI 8.5 for next month’s flagship launch.

Rumours also point to additional foldable models – including a potential wide-screen Galaxy Z Fold variant – appearing within the One UI 9 ecosystem, revealing how closely Samsung may be integrating software and form-factor innovation.

The significance of this early development cannot be overstated

Software updates like One UI traditionally arrive alongside major hardware launches; by preparing One UI 9 now, Samsung is positioning itself to debut a unified platform with its foldable devices later this year. Foldables such as the Z Flip 8 and Z Fold 8 are key pillars of Samsung’s mobile strategy, forming a crucial edge against rivals in an increasingly competitive premium smartphone market. Early software readiness allows more time for optimisation, feature polishing, and compatibility testing – essential for complex devices with unique UI requirements.

For users, the early appearance of One UI 9 in testing signals both continuity and evolution. Samsung has consistently used One UI updates to introduce refined performance, enhanced AI features, and improved user interfaces that harness the capabilities of Google’s Android base – and One UI 9 is expected to follow suit when paired with Android 17. Although specific features have not yet been officially announced, build leaks hint at deeper Galaxy AI tools and interface improvements that could enhance everyday tasks and foldable multitasking experiences.

Why should consumers care

Understanding Samsung’s software direction helps set expectations for upcoming devices and their capabilities. Early software development means that foldables launching later in 2026 could debut with a more mature, feature-rich operating environment from day one. This approach contrasts with staggered updates seen in previous years, where flagship devices often waited months before receiving major OS overhauls.

Looking ahead, Samsung’s rollout timeline is likely to follow a familiar pattern: One UI 8.5 will emerge with the Galaxy S26 series, then progressively expand to eligible models. Later in the year, One UI 9 – potentially shipping first on new foldables – should become available to a broader device portfolio. As leaks and test builds continue to surface, more specific details about what One UI 9 will offer are expected to emerge, keeping fans and industry watchers engaged.

Gaming laptops aren’t getting any cheaper, and HP seems to have decided that fighting rising hardware costs head-on isn’t the answer. Instead, the company is reportedly exploring something different: letting gamers rent their laptops instead of buying them outright. While the service has actually been available for a couple of months, it’s been brought into the notice again owing to the shift in the market.

HP seems to be experimenting with subscription-style access to gaming machines, where players pay a monthly fee to use high-end laptops rather than dropping a large upfront sum. The idea is simple on paper. Instead of spending thousands on a new gaming rig, you spread the cost out like a Netflix plan, with HP handling upgrades, servicing, or replacements behind the scenes.

For some players, that could lower the barrier to entry. A powerful gaming laptop becomes a smaller monthly commitment rather than a major one-time purchase. It also means access to newer hardware more frequently, which is appealing in a space where GPUs and CPUs age fast. At a time when memory prices and component shortages are pushing system costs higher across the industry, the rental pitch might feel practical.

Renting your rig is convenient, but is it the future you want?

But there’s a bigger shift happening here that’s worth pausing on. Renting hardware fits neatly into a broader tech trend where ownership slowly gives way to subscriptions. First it was movies and music, then software, and now even games through cloud services. With platforms like NVIDIA GeForce Now and Xbox Cloud Gaming, players are already streaming titles they don’t locally own. HP’s approach pushes that one step further: you might not even own the device running them.

On the one hand, it’s flexible and potentially cheaper in the short term. On the other hand, it means you’re effectively paying forever. Stop the subscription, and both the laptop and access disappear. No resale value, no long-term asset, and no tinkering or upgrading on your own terms. For budget-conscious gamers, renting could make sense as a stopgap. But if this model becomes the norm, the industry might quietly move from “buy and own” to “subscribe and borrow.” That’s convenient, sure, but it also changes what gaming hardware really means.

So while HP’s rental idea may solve today’s pricing crunch, it also raises a bigger question: do you want your next gaming rig to be yours, or just temporarily checked out?

Apple TV has a slimmer-than-usual lineup of new movies on the way this year, and while that’s disappointing in itself for us film buffs, what’s even more notable is the lack of theatrical releases that have been announced.

If you saw my roundup of new Apple TV movies and shows coming in 2026 last week, you’ll already know that the studio doesn’t have a blockbuster-worthy film slate either. For instance, how do you release a movie about one of Mattel’s most popular kids’ toys and not expect even a sliver of the same reception that Barbie had?