North Korean hackers are ramping up efforts to infiltrate major IT firms and the crypto industry, according to findings from the Cyberwarcon conference. Two groups, "Sapphire Sleet" and "Ruby Sleet," are at the forefront. Sapphire Sleet lures victims with fake job offers, infecting their systems with malware disguised as PDFs. Meanwhile, Ruby Sleet targets aerospace and defense contractors for military secrets. The FBI has also warned of similar tactics aimed at crypto firms, with malware posing as job offers to steal private keys. Recent concerns have arisen over North Korean involvement in the Cosmos ecosystem's Liquid Staking Module.