Key Takeaways
- North Korean IT workers have infiltrated numerous crypto companies, often successfully passing interviews and background checks.
- Hiring North Korean IT workers is illegal in many countries and can result in legal repercussions for companies
- The practice also contributes to funding North Korea's nuclear weapons program.
North Korean IT Workers Infiltrating Crypto Industry
Crypto companies are increasingly becoming targets for North Korean cyberattacks, with the rogue state's IT workers successfully infiltrating numerous blockchain firms.
These IT workers have used fake identities to secure remote jobs in crypto companies, often navigating interviews and reference checks with ease.
Hiring North Korean IT workers is illegal and poses a significant security risk, as evidenced by multiple instances of companies being hacked after employing them.
Crypto Companies Unaware of Hiring North Korean Workers
Many crypto companies, including well-established projects like Injective, ZeroLend, Fantom, Sushi, Yearn Finance, and Cosmos Hub, have unknowingly hired North Korean IT workers.
The workers have successfully presented themselves as legitimate employees, often using fake IDs and providing impressive work histories.
Despite the risks involved, companies continue to struggle to identify and filter out these North Korean infiltrators.
North Korea's Sophisticated Hacking Techniques
North Korea has employed various tactics to infiltrate crypto companies, including social engineering, phishing, and exploiting vulnerabilities in blockchain systems.
These attacks have resulted in significant financial losses for crypto projects, with some companies losing millions of dollars in a single hack.
The North Korean regime is believed to be using the proceeds from these attacks to fund its nuclear weapons program.
The CoinDesk investigation highlights the serious nature of this issue and the need for immediate action.