Story perspectives

North Korean Hackers Target 3 Million Users in Cyberattack

4/6/2026

Summary

Story summary

North Korean actors launched a cyberattack against the Axios open-source project on March 31, 2026, using social engineering to compromise Jason Saayman, the project maintainer.
The attackers built trust over weeks and tricked Saayman into downloading malware disguised as an update.
The breach potentially affected more than 3 million users and allowed the attackers to steal data.
The UNC1069 group is now targeting other Node.js maintainers with similar tactics.

1 of 1

Story summary

North Korean actors launched a cyberattack against the Axios open-source project on March 31, 2026, using social engineering to compromise Jason Saayman, the project maintainer.
The attackers built trust over weeks and tricked Saayman into downloading malware disguised as an update.
The breach potentially affected more than 3 million users and allowed the attackers to steal data.
The UNC1069 group is now targeting other Node.js maintainers with similar tactics.