logo

North Korean Operative Performs Social Engineering Attack on Kraken Crypto Exchange ⋆ ZyCrypto

By: bitcoin ethereum news|2025/05/03 21:45:01
0
Share
copy
Kraken, a crypto exchange, caught a North Korean agent trying to infiltrate the company through a job interview. Kraken noticed something was wrong when the interviewee used a different name from the one listed on his resume. The Kraken team then performed open-source intelligence scans on the interviewee and discovered he was associated with nefarious activity. After red flags started to show, the Kraken team continued interviewing the applicant to get as much information as possible on a potential security breach. The applicant applied for the job after a regular recruitment process. The applicant, however, slipped up on the first call and gave a different name to the one on his resume. The interviewee further displayed signs of having someone coach him during the interview. Kraken, however, was aware of North Korean operatives targeting crypto exchanges, thanks to a partner company giving Kraken the heads-up. For example, other crypto companies were aware of the email used by the interviewee because it was flagged as being associated with disreputable activities. Kraken performed open intelligence analysis on the information they provided, including the email address, and discovered that it had been used multiple times by other employees hired at crypto companies. Many signs were pointing to an organized campaign. The applicant routed his internet traffic through a stand-alone Macintosh workstation to disguise his location. Open-source intelligence linked the applicant’s email to a known data breach. Even the applicant’s identity could be traced to a possible identity theft. Needless to say, the applicant was brazen in his attempts to infiltrate Kraken. Crypto companies like Kraken often employ remote workers to maintain their exchanges. Although the process can be incredibly convenient for workers and managers, there are also a few security holes. Kraken has learned a valuable lesson during this experience, strengthening its resolve to verify new employees rather than trust them at face value. The North Korean operatives could have easily infiltrated the company and used their position to inject malware into the company’s software or even steal valuable information. The infiltration attempt was relatively sophisticated, so, surprisingly, the applicant made such an obvious mistake, using a different name from the one listed on his resume. State-sponsored hackers, notably from North Korea, have surprised the world with multiple attacks. They will probably continue their attempts to breach crypto networks for some time. North Korean hackers have tried many exploits, including malware, phishing attacks, and now a social engineering attempt. There is a new trend of North Korean hackers infiltrating systems to perform exploits from within the system. From recent events, one such example of this trend includes the North Korean Lazarus Group creating shell companies in America to exploit job applicants. Usually, the goal is to steal cryptocurrencies because they are easy to conceal and transfer across borders, even to North Korea. Social Engineering attacks may continue to become a mainstay with the crypto industry, compelling many crypto investors to be extra vigilant when communicating online. Source: https://zycrypto.com/north-korean-operative-performs-social-engineering-attack-on-kraken-crypto-exchange/

You may also like

Naval personally takes the stage: The historic collision between ordinary people and venture capital

Naval personally stepped in as the chairman of the USVC Investment Committee. This SEC-registered fund launched by AngelList attempts to bring top private tech assets like OpenAI, Anthropic, and xAI to the general public with a $500 entry threshold. It is not just a new fund, but a structural experi...

a16z Crypto: 9 Charts to Understand the Evolution Trends of Stablecoins

Stablecoins are evolving from trading tools into universal payment infrastructure, and this process is quieter and more thorough than most people expected.

Refutation of Yang Haipo's "The End of Cryptocurrency"

This may be the true test of cryptocurrency. It's not about whether the price has reached a new high, nor about who will achieve financial freedom in the next bull market, but rather whether, after all the grand narratives have been washed away by cycles, it can still leave behind some simpler, more...

Can a hairdryer earn $34,000? Interpreting the reflexivity paradox of prediction markets

Prediction markets are essentially betting on reality, and when participants can access or even influence this path earlier, the market no longer just reflects reality but begins to shape it in return.

6MV Founder: In 2026, the "landmark turning point" for crypto investment has arrived

"I will deploy funds in 2026, so I will tell you this is the best year in history."

Abraxas Capital Mints $2.89 Billion USDT: Liquidity Boost or Just More Stablecoin Arbitrage?

Abraxas Capital just received $2.89 billion in freshly minted USDT from Tether. Is this a bullish liquidity injection for crypto markets, or is it business as usual for a stablecoin arbitrage giant? We analyze the data and the likely impact on Bitcoin, altcoins, and DeFi.

Popular coins

Latest Crypto News

Read more