Suspected North Korean actors use fake ‘coding assignments’ to steal crypto

Proofpoint newsroom feed (May–June 2026) highlights multiple threat and product developments: suspected North Korean actors are using fake ‘coding assignment’ job scams to socially engineer and steal cryptocurrency; China-linked threat cluster TA4922 has expanded targeted phishing campaigns into the U.K., Germany, Italy, and South Africa; Proofpoint announced a new Active Exploits Protection capability to help prioritize vulnerability patching amid real-world/AI-era attacks and an integration with the Claude Compliance API for extended data governance; Verizon DBIR coverage calls out increased