The Kraken Team Uncovered a North Korean Spy Among Job Applicants
By: cryptosheadlines|2025/05/03 22:45:01
0
Share
Airdrop Is Live CaryptosHeadlines Media Has Launched Its Native Token CHT. Airdrop Is Live For Everyone, Claim Instant 5000 CHT Tokens Worth Of $50 USDT. Join the Airdrop at the official website, CryptosHeadlinesToken.com A North Korean hacker attempted to infiltrate the development ranks of cryptocurrency exchange Kraken under the guise of a candidate for an engineering position.According to the team’s report, the applicant immediately seemed suspicious. He joined the first online interview under a name different from the one on his resume, but quickly changed it. During the conversation, the candidate “periodically changed intonation” as if someone was giving him instructions in real time.Industry partners warned the company about the likelihood of encountering a spy among potential employees and provided a list of email addresses linked to a group of North Korean hackers. A Kraken candidate used one of the listed addresses when applying.Exchange specialists initiated an investigation that revealed a network of fake identities and aliases under which the hacker tried to get a job in companies in the crypto industry and other sectors. In some cases, the attacker managed to get the desired position.Upon closer examination, experts discovered the hacker’s attempts to hide his location and forged documents with other people’s data.The team put the spy candidate through several rounds of interviews and background checks to gain insight into his identity and tactics. In the final online meeting, the hacker was asked to show his ID and recommend establishments in the city where he supposedly resides. These routine checks took the applicant by surprise, and he was unable to provide convincing answers.“Don’t trust, verify. This core crypto principle is more relevant than ever in the digital age. State-sponsored attacks aren’t just a crypto, or U.S. corporate, issue – they’re a global threat. Any individual or business handling value is a target, and resilience starts with operationally preparing to withstand these types of attacks,” Nick Percoco, the firm’s head of security, commented on the incident.Kraken specialists noted that as cyber threats evolve, maintaining security relies more and more heavily on a holistic proactive approach: “A culture of productive paranoia is key.”North Korean Hackers Created Fake Companies to Scam UsersContagious Interview, a group linked to the North Korean hacking organization Lazarus, has registered three shell companies to distribute malware. This is according to the Silent Push report.The firms BlockNovas, Angeloper Agency and SoftGlide are being used to deceive users through fake interviews.Silent Push senior analyst Zach Edwards said the two fictitious companies are registered in the United States.According to Silent Push, hackers create fake employee profiles using images generated by artificial intelligence. They also steal photos of real people to boost the credibility of their firms. Analysts reported that attackers find victims through fake job ads on GitHub and freelancing platforms.During the “interview”, the potential victim encounters a video recording error. The solution is a “simple copy-and-paste trick” that leads to a malware download. Silent Push has identified three types of “infectious” software: BeaverTail, InvisibleFerret, and Otter Cookie. These programs aim to steal information, including cryptocurrency wallet keys.According to Edwards, the hacking campaign has been going on since 2024, since then FBI liquidated the firm Blocknovas. Among the victims there are well-known public users, the expert noted.Hackers stole $100,000 from CEO Emblem Vault via ZoomThe head of NFT platform Emblem Vault, Jake Gallen, claimed to have lost more than $100,000 in cryptocurrency due to attackers using Zoom.According to him, the incident occurred during a video call with a crypto community member who identified himself as the owner of a mining platform. Gallen reported that scammers installed GOOPDATE malware on his computer. Several cryptocurrency wallets were compromised, resulting in the loss of bitcoins and Ethereum. Gallen partnered with The Security Alliance (SEAL) to analyze the attack. The company determined that ELUSIVE COMET, a group that uses social engineering to install malware and steal cryptocurrencies, was responsible;According to Gallen, he got into a Zoom meeting with a crypto-enthusiast with 26,000 subscribers on X. During the video call, the attacker used the remote access feature to install the program. SEAL experts tested Zoom and confirmed that by default, the platform allows guests to request remote access to the computer. A researcher under the nickname samczsun told Cointelegraph that for a successful attack, an attacker would need to convince the victim to manually grant such access. The hackers later hacked into Gallen’s X account and tried to use it to lure new victims in private messages. They also gained access to Ledger’s hardware wallet, even though Gallen had used it several times over three years. SEAL experts link the ELUSIVE COMET group to Aureon Capital, which is responsible for “millions of dollars in stolen funds” and poses a significant risk to users because of its “elaborate backstory.”Source link
You may also like

Who is the true winner of the "Tokenization" narrative?
Virtually everyone benefits, but the reason for the benefit, the timing, and the underlying logic are completely different.

Moss: The Era of AI-Traded by Anyone | Project Introduction
AI Trading Agent is rapidly growing its infrastructure.

Chip Smuggling Case Exposes Regulatory Loophole | Rewire News Evening Update
AI chips have become a strategic asset more sensitive than missiles

How a Structured AI Crypto Trading Bot Won at the WEEX Hackathon
Ritmex demonstrates how disciplined risk control and structured signals can make an AI crypto trading bot more stable and reliable on WEEX, highlighting the importance of combining execution discipline with scalable AI trading systems.

Old Indicator Fails, Three Major New Signals Emerge: BTC True Bottom May Still Be Below $60K
When the grocery shopping auntie on the subway, or Tony the hairdresser, start asking you about BTC, crypto, and cryptocurrency investments, selling immediately will be the only best option.

Meeting OpenClaw Founder at a Hackathon: What Else Can Lobsters Do?
Imperial College London MetaGame: AI Agent × Web3 Landing Three Major Directions.

Huang Renxun's Latest Podcast Transcript: NVIDIA's Future, Embodied Intelligence and Agent Development, Soaring Demand for Inferencing, and AI's PR Crisis
The future of competition is not only about whose model is bigger, whose computing power is stronger, but also about who understands the industry better, who can more deeply integrate AI into real processes, and who can organize these capabilities into a set of executable, scalable systems
How a Structured AI Crypto Trading Bot Won at the WEEX Hackathon
Crypto_Trade shows how structured inputs and controlled adaptability can build a more stable and reliable AI crypto trading bot within the WEEX AI Trading Hackathon, highlighting a practical path toward scalable AI trading systems.

AI Starts to Devour the Manufacturing Industry | Rewire News Morning Edition
When Bezos starts using AI to buy factories instead of building data centers, it shows that he believes the next wave of AI's value is not inside the box.

When Scaling Meets Speed, Ethereum Foundation Introduces "Hardness" to Safeguard the Base Layer
Hardness is a protocol-level commitment to Ethereum core properties, including censorship resistance, privacy, security, and permissionlessness.

Google, Circle, Stripe Flock Together to Let AI Spend Money: Payment Giants' Joys and Worries in 2026 Q1
The real enemy is no longer each other, but zero cost itself

$100 Billion Factory Purchase: Bezos and Middle Eastern Capital Shift AI Money from Cloud to Shop Floor
Bezos doesn't invest in a new model; he invests in a supply chain.

Xiaomi and MiniMax both unleash their ultimate moves, signaling the start of the Agent Pricing War.
No brand, no marketing, let developers vote with their feet in 8 days

Predicting markets has taken the spotlight, but the Perp DEX has been quietly waging war on traditional exchanges.
During a weekend of relentless volatility, while traditional financial markets were closed, another wave of investors was busy trading gold, oil, and silver on a blockchain platform.

Is the Market Slump Still Making Millions a Day? Is pump.fun's Revenue Real?
If it's really that profitable, what's keeping $PUMP's price down?

Understanding x402 and MPP in One Article: The Two Paths of Agent Payments
x402 for in-protocol payments, MPP for off-chain payments

Quick Look at the Latest 18 Graduation Projects from Alliance: Who's the Next Pump.fun?
The project's core innovation areas include stablecoin payments, AI applications, prediction markets, and RWA tokenization.

It's not just the prediction market that profits from the Iraq War
Always maintaining the ambiguity of regulation with "offshore" may be the consensus of the perp DEX.
Who is the true winner of the "Tokenization" narrative?
Virtually everyone benefits, but the reason for the benefit, the timing, and the underlying logic are completely different.
Moss: The Era of AI-Traded by Anyone | Project Introduction
AI Trading Agent is rapidly growing its infrastructure.
Chip Smuggling Case Exposes Regulatory Loophole | Rewire News Evening Update
AI chips have become a strategic asset more sensitive than missiles
How a Structured AI Crypto Trading Bot Won at the WEEX Hackathon
Ritmex demonstrates how disciplined risk control and structured signals can make an AI crypto trading bot more stable and reliable on WEEX, highlighting the importance of combining execution discipline with scalable AI trading systems.
Old Indicator Fails, Three Major New Signals Emerge: BTC True Bottom May Still Be Below $60K
When the grocery shopping auntie on the subway, or Tony the hairdresser, start asking you about BTC, crypto, and cryptocurrency investments, selling immediately will be the only best option.
Meeting OpenClaw Founder at a Hackathon: What Else Can Lobsters Do?
Imperial College London MetaGame: AI Agent × Web3 Landing Three Major Directions.