Commit to Compromise: A New Threat Actor Targeting the Cryptocurrency Industry's Software Development Infrastructure

A newly identified, financially motivated threat actor dubbed JINX-0164 is targeting cryptocurrency organizations by using sophisticated LinkedIn social engineering, custom macOS malware, and CI/CD pipeline hijacking to steal credentials, propagate through development infrastructure, and conduct supply chain attacks.