North Korean Hackers Targeting Crypto Firms
The post North Korean Hackers Targeting Crypto Firms appeared on BitcoinEthereumNews.com.
The FBI has issued a public service announcement today, in which they explained how the DPRK is aggressively targeting the crypto industry. In their announcement, the FBI mentioned that the Democratic People’s Republic of Korea (DPRK) is using social engineering schemes to target crypto companies. These social engineering campaigns are highly tailored and difficult to detect. The DPRK targets employees of decentralized finance and cryptocurrency-related businesses to deploy malware and steal the company’s crypto assets. North Korean cyber players are known for their subtle research on potential targets. They often engage in extensive pre-operative planning to craft highly personalized scenarios to deceive the victims. These scenarios involve fake offers of employment or investment tailored to the background and interests of the victim. To penetrate into an organization they apply for a developer job with high end work experience that makes them the perfect candidate. They create well structured and highly tailored github profiles, fake identities including passports and other national id cards. The pre-operational research is fine to the details at such a level that it becomes impossible to identify the real person. On Aug 15, ZachXBT, a renowned crypto researcher, shared a similar incident where a crypto organization asked for his help after they lost $1.3M in an exploit. Zach shared that the team was unaware that they had hired multiple DPRK IT workers as devs. He also shared that he has found more than 25 crypto projects where these DPRK devs were active. 1/ Recently a team reached out to me for assistance after $1.3M was stolen from the treasury after malicious code had been pushed. Unbeknownst to the team they had hired multiple DPRK IT workers as devs who were using fake identities. I then uncovered 25+ crypto projects with… pic.twitter.com/W7SgY97Rd8 — ZachXBT (@zachxbt) August 15, 2024…
Filed under: News - @ September 4, 2024 12:16 am