Google Issues Danger Warning: Beware of Accounts Being Drained Automatically

Google Issues Danger Warning: Beware of Accounts Being Drained Automatically

Jakarta, CNBC Indonesia - Google has issued a warning about a cyber attack threat from North Korea. The severity of this attack could allow perpetrators to view the contents of phones, including victims’ bank accounts.

These hackers, as explained by Google, breach the software running in the background. They target the programme that connects applications and web services, Axios, and add malicious software to updates.

“Every time you load a website, check your bank balance, or open an app on your phone, Axios is likely running in the background to execute it,” said senior Sentinel One researcher Tom Hegel, quoted from Reuters on Thursday (2/4/2026).

The malicious software can open access to computer data, including access credentials. This data can then be used for additional data theft or other attacks.

Reuters notes that Axios is open-source. This means the code can be licensed and openly modified by its users.

This hacking is also described as a supply chain attack, enabling attacks on downstream entities.

“You don’t need to click anything or make a mistake. The trusted software has done it,” he explained.

Google’s head of intelligence group analysis, John Hultquist, also explained that North Korean hackers are experienced with supply chain attacks. Specifically for stealing cryptocurrencies.

“North Korean hackers have extensive experience with supply chain attacks, particularly those used to steal cryptocurrencies,” he revealed.

Google links the hacking to a group that has been tracked and has the code UNC1069. Reportedly, this group has been operating since 2018, targeting the cryptocurrency and financial industries.

Axios developers could not be reached for comment. Meanwhile, the North Korean representative at the UN did not immediately respond to requests for comment.