Kraken Thwarts North Korean Hacker Posing as Job Applicant

By: financefeeds|2025/05/03 00:30:02
0
Share
copy
U.S.-based crypto exchange Kraken revealed that it uncovered and blocked a North Korean hacking attempt disguised as a job application for an engineering role. The scheme was detailed in a blog post on Wednesday and shows the increasing use of social engineering and insider threats by state-backed cybercriminals targeting the crypto industry. According to Kraken, the red flags emerged early in the interview process when the candidate used a different name than the one on their application and intermittently switched voices during the call—suggesting someone was coaching them live. Rather than cutting the process short, Kraken advanced the applicant through additional stages to collect intelligence on the hacker’s methods. The exchange later confirmed the applicant’s email matched a known address linked to North Korea’s cyber units , which had been flagged by industry partners sharing intelligence on ongoing threats. The investigation revealed a broader network of fake identities used by the hacker to apply to several firms, including signs of manipulated ID documents, a resume tied to a GitHub profile linked to an exposed email, and suspicious login behavior involving VPNs and remote Mac desktops. In the final round of interviews, Kraken’s chief security officer, Nick Percoco, ran a series of identity verification traps that the applicant failed, confirming the person behind the screen was not who they claimed to be. The individual’s ID appeared to contain details lifted from a previous identity theft case. “This wasn’t just a fake candidate—it was a coordinated attempt to get inside a crypto company,” said Percoco. “In today’s environment, the old rules don’t apply. Trust has to be earned—and verified.” The attempted breach follows warnings from U.S., Japanese, and South Korean authorities that North Korea has been actively embedding IT workers in blockchain and crypto firms to exfiltrate funds or intelligence. Lazarus Group , a notorious North Korean hacking collective, was blamed for February’s record-breaking $1.4 billion Bybit hack and several others totaling over $650 million in 2024 alone.

You may also like

60 Essential Skills, Workflows, and Open Source Projects, the Ultimate Claude Advancement Checklist

Developers, content creators, product builders, and beginners can all use this

SpaceX to Raise $75 Billion | Rewire News Nightly

What additional valuation can the AI unicorn behind in line achieve, which is a bigger question than SpaceX itself

PUMP Valuation Breakdown: On-chain Data Disproves the "Fake Volume" Theory, Where Does the Real Discount Come From?

The project initially started as a niche experiment but quickly became one of the highest-grossing applications on public blockchains.

Tiger Research: What AI services do cryptocurrency companies offer?

Cryptocurrency giants like Binance and Coinbase have fully launched an AI defense battle: Driven by FOMO sentiment, leading platforms are accelerating the deep integration of AI agents into core businesses such as trading, security, and payments.

The war not only drives up oil prices but also causes Circle's stock price to soar

High interest rate expectations combined with the explosive growth of stablecoin infrastructure have led to Circle's stock price doubling in five weeks against the trend: Understanding the dual game of "macro interest rate trading" and "global payment foundation" behind the surge in one article.

When agents become consumers, who will rewrite the underlying logic of internet commerce?

Thirty years ago, due to the high cost of micropayments, the internet had no choice but to adopt an advertising model. Today, the technical threshold for micropayments is nearly zero, but trust has become the most expensive luxury. Whoever can bridge this gap will dominate the next generation of int...

Popular coins

Latest Crypto News

Read more