NICKEL ALLEY strategy: Fake it ‘til you make it

North Korea-linked threat group NICKEL ALLEY is aggressively targeting software developers with sophisticated fake job schemes, fraudulent companies, and malicious code repositories to deploy custom malware and steal cryptocurrency, while also seeking opportunities for broader supply chain compromise and corporate espionage.