North Korean Hackers Lure Victims with Fake Jobs and Investment Schemes: FBI Warns of Cryptocurrency Theft Epidemic
North Korean Hackers Targeting Cryptocurrency Industry, FBI Warns
The U.S. Federal Bureau of Investigation (FBI) has issued a warning that North Korea is targeting people working in decentralized finance, cryptocurrency, and similar industries, distributing malicious software and attempting to steal cryptocurrency.
The FBI stated that “The Democratic People’s Republic of Korea is conducting highly tailored, difficult-to-detect social engineering campaigns against employees of decentralized finance, cryptocurrency, and similar businesses to deploy malware and steal company cryptocurrency.”
According to the FBI, North Korean malicious cyber actors, or hackers, have been targeting cryptocurrency exchange-traded funds (ETFs) and other cryptocurrency-related businesses over the past several months, reaching out to employees of those companies with offers of new jobs or investments in the companies.
Armed with fluent English and technical knowledge of cryptocurrencies, the hackers engaged in lengthy conversations with potential victims to build rapport, even posing as recruiters or celebrities.
In this way, they induce you to download malicious software and then attempt to steal your cryptocurrency.
The FBI warned that “unexpected job offers from well-known cryptocurrency or technology companies, unrealistically high compensation promises without negotiation,” and “sudden investment offers without prior discussion or proposal” could be signs of an attack by North Korean hackers.
Additionally, it recommends developing unique identity verification procedures to prevent damage, and not storing login information or passwords for cryptocurrency wallets on devices connected to the Internet. It also advises taking countermeasures such as immediately disconnecting the device from the Internet if you suspect that you have been attacked.
Nick Carlson, an analyst at TRM Labs, a U.S. cryptocurrency analysis information company, said that “North Korea is the world’s best when it comes to cryptocurrency theft technology,” adding, “North Korea is the only country that does this.”
Analyst Carlson worked at the FBI on cyber sanctions against North Korea. He noted that “North Korean hackers are outpacing U.S. and South Korean defense efforts,” and that they “operate differently than many other hacking groups because they have no fear of arrest or extradition.”
While regular hackers hack to make money, North Korean hackers operate as state agents, making them much more reckless and aggressive, without worrying about arrest or extradition while in Pyongyang or China.
Carlson added that “North Korean hackers are world-class at targeting employees of cryptocurrency companies, gathering information, and developing malware based on that information to use in attacks.”
He stressed that “education is really important” to prevent such crimes, and that “everyone in the cryptocurrency industry needs to be aware that they can be a target.”
Carlson emphasized that “North Korean hackers don’t care who their targets are or where they are, whether they are Chinese or Russian.”
To prevent cryptocurrency theft, Carlson stressed that “everyone working in the cryptocurrency industry must always be aware that North Korean hackers are out to get them.”
