North Korean Operative Performs Social Engineering Attack on Kraken Crypto Exchange ⋆ ZyCrypto

By: bitcoin ethereum news|2025/05/03 13:45:01
0
Share
copy
Kraken, a crypto exchange, caught a North Korean agent trying to infiltrate the company through a job interview. Kraken noticed something was wrong when the interviewee used a different name from the one listed on his resume. The Kraken team then performed open-source intelligence scans on the interviewee and discovered he was associated with nefarious activity. After red flags started to show, the Kraken team continued interviewing the applicant to get as much information as possible on a potential security breach. The applicant applied for the job after a regular recruitment process. The applicant, however, slipped up on the first call and gave a different name to the one on his resume. The interviewee further displayed signs of having someone coach him during the interview. Kraken, however, was aware of North Korean operatives targeting crypto exchanges, thanks to a partner company giving Kraken the heads-up. For example, other crypto companies were aware of the email used by the interviewee because it was flagged as being associated with disreputable activities. Kraken performed open intelligence analysis on the information they provided, including the email address, and discovered that it had been used multiple times by other employees hired at crypto companies. Many signs were pointing to an organized campaign. The applicant routed his internet traffic through a stand-alone Macintosh workstation to disguise his location. Open-source intelligence linked the applicant’s email to a known data breach. Even the applicant’s identity could be traced to a possible identity theft. Needless to say, the applicant was brazen in his attempts to infiltrate Kraken. Crypto companies like Kraken often employ remote workers to maintain their exchanges. Although the process can be incredibly convenient for workers and managers, there are also a few security holes. Kraken has learned a valuable lesson during this experience, strengthening its resolve to verify new employees rather than trust them at face value. The North Korean operatives could have easily infiltrated the company and used their position to inject malware into the company’s software or even steal valuable information. The infiltration attempt was relatively sophisticated, so, surprisingly, the applicant made such an obvious mistake, using a different name from the one listed on his resume. State-sponsored hackers, notably from North Korea, have surprised the world with multiple attacks. They will probably continue their attempts to breach crypto networks for some time. North Korean hackers have tried many exploits, including malware, phishing attacks, and now a social engineering attempt. There is a new trend of North Korean hackers infiltrating systems to perform exploits from within the system. From recent events, one such example of this trend includes the North Korean Lazarus Group creating shell companies in America to exploit job applicants. Usually, the goal is to steal cryptocurrencies because they are easy to conceal and transfer across borders, even to North Korea. Social Engineering attacks may continue to become a mainstay with the crypto industry, compelling many crypto investors to be extra vigilant when communicating online. Source: https://zycrypto.com/north-korean-operative-performs-social-engineering-attack-on-kraken-crypto-exchange/

-- Price

--

You may also like

Strategy Founder: The Next 10 Years of Bitcoin

In the next decade, the biggest evolution of Bitcoin is precisely "responding to change with invariance." The four-year cycle is giving way to capital flows such as ETFs, corporate and sovereign reserves, and bank credit, while digital credit and digital currency will grow layer upon layer on top of...

Forbes Special Report: Stablecoin cross-border payments are faster now, but not cheaper yet

Cross-border payments using stablecoins are rapidly expanding, bringing speed and accessibility, but due to insufficient institutional liquidity, they have not yet delivered on their promised cost savings. The technology has been validated, and regulations are improving, but the industry has not yet...

Li Feifei's latest long article: When video generation, robots, and NVIDIA all claim to be world models, we need a taxonomy

Language gives machines a way to talk about the world. The world model is the means by which machines ultimately understand, imagine, reason, and interact with it.

Blaming the desolation of the cryptocurrency world on the rise of AI is a form of intellectual laziness

The emergence of giants signifies a mature business model. Although it will reduce speculative space, there is also enough room for error, allowing for the continuous emergence of new forces.

The impact of OUSD on Circle, Tether, and Paxos: not a single negative factor, but a more complex reshaping of competition

OUSD will not be the last new competitor; Circle needs to respond more actively in terms of products, distribution, and ecosystem collaboration.

A valuation of 8 billion dollars, doubling in 8 months! What makes the crypto-friendly bank Erebor Bank stand out?

Erebor is a high-profile experiment taking place at the intersection of banking, cryptocurrency, and industrial policy.

Popular coins

Latest Crypto News

Read more
iconiconiconiconiconiconicon
Customer Support:@weikecs
Business Cooperation:@weikecs
Quant Trading & MM:bd@weex.com
VIP Program:support@weex.com