North Korean Operative Performs Social Engineering Attack on Kraken Crypto Exchange ⋆ ZyCrypto
By: bitcoin ethereum news|2025/05/03 21:45:01
0
Share
Kraken, a crypto exchange, caught a North Korean agent trying to infiltrate the company through a job interview. Kraken noticed something was wrong when the interviewee used a different name from the one listed on his resume. The Kraken team then performed open-source intelligence scans on the interviewee and discovered he was associated with nefarious activity. After red flags started to show, the Kraken team continued interviewing the applicant to get as much information as possible on a potential security breach. The applicant applied for the job after a regular recruitment process. The applicant, however, slipped up on the first call and gave a different name to the one on his resume. The interviewee further displayed signs of having someone coach him during the interview. Kraken, however, was aware of North Korean operatives targeting crypto exchanges, thanks to a partner company giving Kraken the heads-up. For example, other crypto companies were aware of the email used by the interviewee because it was flagged as being associated with disreputable activities. Kraken performed open intelligence analysis on the information they provided, including the email address, and discovered that it had been used multiple times by other employees hired at crypto companies. Many signs were pointing to an organized campaign. The applicant routed his internet traffic through a stand-alone Macintosh workstation to disguise his location. Open-source intelligence linked the applicant’s email to a known data breach. Even the applicant’s identity could be traced to a possible identity theft. Needless to say, the applicant was brazen in his attempts to infiltrate Kraken. Crypto companies like Kraken often employ remote workers to maintain their exchanges. Although the process can be incredibly convenient for workers and managers, there are also a few security holes. Kraken has learned a valuable lesson during this experience, strengthening its resolve to verify new employees rather than trust them at face value. The North Korean operatives could have easily infiltrated the company and used their position to inject malware into the company’s software or even steal valuable information. The infiltration attempt was relatively sophisticated, so, surprisingly, the applicant made such an obvious mistake, using a different name from the one listed on his resume. State-sponsored hackers, notably from North Korea, have surprised the world with multiple attacks. They will probably continue their attempts to breach crypto networks for some time. North Korean hackers have tried many exploits, including malware, phishing attacks, and now a social engineering attempt. There is a new trend of North Korean hackers infiltrating systems to perform exploits from within the system. From recent events, one such example of this trend includes the North Korean Lazarus Group creating shell companies in America to exploit job applicants. Usually, the goal is to steal cryptocurrencies because they are easy to conceal and transfer across borders, even to North Korea. Social Engineering attacks may continue to become a mainstay with the crypto industry, compelling many crypto investors to be extra vigilant when communicating online. Source: https://zycrypto.com/north-korean-operative-performs-social-engineering-attack-on-kraken-crypto-exchange/
You may also like

Old Indicator Fails, Three Major New Signals Emerge: BTC True Bottom May Still Be Below $60K
When the grocery shopping auntie on the subway, or Tony the hairdresser, start asking you about BTC, crypto, and cryptocurrency investments, selling immediately will be the only best option.

Meeting OpenClaw Founder at a Hackathon: What Else Can Lobsters Do?
Imperial College London MetaGame: AI Agent × Web3 Landing Three Major Directions.

Huang Renxun's Latest Podcast Transcript: NVIDIA's Future, Embodied Intelligence and Agent Development, Soaring Demand for Inferencing, and AI's PR Crisis
The future of competition is not only about whose model is bigger, whose computing power is stronger, but also about who understands the industry better, who can more deeply integrate AI into real processes, and who can organize these capabilities into a set of executable, scalable systems
How a Structured AI Crypto Trading Bot Won at the WEEX Hackathon
Crypto_Trade shows how structured inputs and controlled adaptability can build a more stable and reliable AI crypto trading bot within the WEEX AI Trading Hackathon, highlighting a practical path toward scalable AI trading systems.

AI Starts to Devour the Manufacturing Industry | Rewire News Morning Edition
When Bezos starts using AI to buy factories instead of building data centers, it shows that he believes the next wave of AI's value is not inside the box.

When Scaling Meets Speed, Ethereum Foundation Introduces "Hardness" to Safeguard the Base Layer
Hardness is a protocol-level commitment to Ethereum core properties, including censorship resistance, privacy, security, and permissionlessness.

Google, Circle, Stripe Flock Together to Let AI Spend Money: Payment Giants' Joys and Worries in 2026 Q1
The real enemy is no longer each other, but zero cost itself

$100 Billion Factory Purchase: Bezos and Middle Eastern Capital Shift AI Money from Cloud to Shop Floor
Bezos doesn't invest in a new model; he invests in a supply chain.

Xiaomi and MiniMax both unleash their ultimate moves, signaling the start of the Agent Pricing War.
No brand, no marketing, let developers vote with their feet in 8 days

Predicting markets has taken the spotlight, but the Perp DEX has been quietly waging war on traditional exchanges.
During a weekend of relentless volatility, while traditional financial markets were closed, another wave of investors was busy trading gold, oil, and silver on a blockchain platform.

Is the Market Slump Still Making Millions a Day? Is pump.fun's Revenue Real?
If it's really that profitable, what's keeping $PUMP's price down?

Understanding x402 and MPP in One Article: The Two Paths of Agent Payments
x402 for in-protocol payments, MPP for off-chain payments

Quick Look at the Latest 18 Graduation Projects from Alliance: Who's the Next Pump.fun?
The project's core innovation areas include stablecoin payments, AI applications, prediction markets, and RWA tokenization.

It's not just the prediction market that profits from the Iraq War
Always maintaining the ambiguity of regulation with "offshore" may be the consensus of the perp DEX.

The "bank card" of AI has caught the attention of the giants
AI has not learned how to spend money yet, and the people who fix banks for it have already arrived.

Morning News | U.S. SEC approves tokenized trading on Nasdaq; Animoca Brands announces investment in AVAX tokens; Algorand Foundation completes strategic integration
Overview of Important Market Events on March 19

$70 trillion wealth transfer, the financial gateway is being rewritten | Interview with Robinhood CEO Vlad Tenev
The next key competition in the financial sector may revolve around where the "intergenerational wealth transfer" of up to $90 trillion will ultimately flow.

Whale Opens 20x Oil Short on Hyperliquid With 5.6M USDC at Risk
Key Takeaways A significant leveraged short position on crude oil has been initiated on Hyperliquid using 5.6 million…
Old Indicator Fails, Three Major New Signals Emerge: BTC True Bottom May Still Be Below $60K
When the grocery shopping auntie on the subway, or Tony the hairdresser, start asking you about BTC, crypto, and cryptocurrency investments, selling immediately will be the only best option.
Meeting OpenClaw Founder at a Hackathon: What Else Can Lobsters Do?
Imperial College London MetaGame: AI Agent × Web3 Landing Three Major Directions.
Huang Renxun's Latest Podcast Transcript: NVIDIA's Future, Embodied Intelligence and Agent Development, Soaring Demand for Inferencing, and AI's PR Crisis
The future of competition is not only about whose model is bigger, whose computing power is stronger, but also about who understands the industry better, who can more deeply integrate AI into real processes, and who can organize these capabilities into a set of executable, scalable systems
How a Structured AI Crypto Trading Bot Won at the WEEX Hackathon
Crypto_Trade shows how structured inputs and controlled adaptability can build a more stable and reliable AI crypto trading bot within the WEEX AI Trading Hackathon, highlighting a practical path toward scalable AI trading systems.
AI Starts to Devour the Manufacturing Industry | Rewire News Morning Edition
When Bezos starts using AI to buy factories instead of building data centers, it shows that he believes the next wave of AI's value is not inside the box.
When Scaling Meets Speed, Ethereum Foundation Introduces "Hardness" to Safeguard the Base Layer
Hardness is a protocol-level commitment to Ethereum core properties, including censorship resistance, privacy, security, and permissionlessness.