OPPO linked to North Korean hacking campaign affecting 1,600 organizations

Chinese smartphone maker OPPO has been linked to a significant hacking campaign attributed to North Korean cybercriminals. This operation has reportedly breached over 1,600 organizations across 57 countries. The findings were presented by cybersecurity researcher Vangelis Stykas at the Black Hat security conference, where he detailed the extensive impact of these intrusions.

Stykas’ investigation, which spanned nearly two years, revealed that 700 to 800 of the targeted organizations experienced severe breaches, granting hackers high-level access to internal systems. Along with OPPO, other notable targets included Coinbase, Uniswap Labs, and Boston Children’s Hospital. These organizations were identified as they responded to Stykas’ disclosures or took steps to address the vulnerabilities.

The hackers employed a strategy that involved targeting software developers with enticing job offers. Victims were tricked into completing coding tests that contained malware, allowing the attackers to steal credentials and infiltrate corporate networks. While the primary aim appeared to be accessing cryptocurrency wallets and blockchain infrastructure, experts caution that the persistent access gained by the attackers could lead to future espionage or more damaging attacks.

The exact implications for OPPO remain unclear, as many organizations named in the report have not responded to media inquiries. It is uncertain what specific data may have been compromised, or whether OPPO smartphone users are at risk. The situation highlights the ongoing threat posed by sophisticated cyber operations, particularly those linked to state-sponsored actors.