[SlowMist: North Korea's Lazarus Group Subdivision HexagonalRodent Targeting Web3 Developers] SlowMist has issued a security alert stating that HexagonalRodent, a hacking group under North Korea's Lazarus Group, is targeting Web3 developers. They are using social engineering tactics such as 'high-paying remote positions' and 'recruitment for well-known projects' to lure victims into executing malicious code, ultimately stealing crypto assets. On March 9, 2026, a user with the same name as a fast-draft extension developer was infected with the OtterCookie malware, which was used to distribute malicious programs. The attackers are extensively utilizing ChatGPT and Cursor to assist in carrying out the attacks, further enhancing their disguise and deception.