TraderTraitor targets blockchain companies through spear-phishing messages. The group sends these messages to employees, particularly those in system administration or software development roles, on various communication platforms, intended to gain access to these start-up and high-tech companies. TraderTraitor may be the work of operators previously responsible for APT38 activity.
Which sector does the TraderTraitor group primarily target?+
The TraderTraitor group primarily targets blockchain companies.
What measures should defenders take against this group's spear-phishing attacks?+
Defenders should focus on educating personnel, especially those with elevated privileges, about targeted spear-phishing risks and enforce strict access controls such as multi-factor authentication.