Kraken Catches North Korean Hacker Posing as Job Applicant in Major Crypto Security Breach
By: coinchapter|2025/05/02 22:00:05
0
Share
Kraken, a major crypto exchange, exposed a North Korean hacker who applied for a job using a fake identity. The incident was revealed in a May 1 blog post. The person posed as an engineering candidate named Steven Smith. Kraken’s security and recruitment teams moved the candidate through the hiring process to investigate. They later confirmed that the applicant was part of a wider network tied to North Korean state-sponsored cybercrime. The person used a suspicious email connected to known North Korean hacker activity. The candidate changed their name during interviews and altered their voice several times. Kraken also detected signs of outside coaching. Fake Identities and Technical Red Flags Detected An internal Open-Source Intelligence (OSINT) investigation exposed the use of multiple fake identities by the applicant. Several of these identities had prior links to crypto firms. One of them appeared on the U.S. sanctions list. Kraken identified clear inconsistencies during the process. The applicant accessed remote Mac computers through a Virtual Private Network (VPN). They also submitted altered identification documents. These actions raised concerns about planned infiltration. During the final interview, Kraken’s Chief Security Officer Nick Percoco questioned the applicant. The hacker failed to confirm their location or citizenship. Percoco told CBS. Huione Group Accused of Aiding North Korean Crypto Crimes The Financial Crimes Enforcement Network (FinCEN) proposed banning the Huione Group from the U.S. financial system. The Cambodia-based group allegedly helped North Korean hackers move stolen funds. U.S. Treasury Secretary Scott Bessent stated, FinCEN found that Huione laundered over $4 billion between August 2021 and January 2025. Their platforms—Huione Pay, Huione Crypto, and Haowang Guarantee—were used for payment services connected to crypto crimes. The ban would block Huione from accessing U.S. correspondent banking services. Officials said this would weaken DPRK cybercrime operations and disrupt money laundering channels. DPRK Hackers Use Social Engineering and Malware to Target Crypto North Korea-linked hackers stole more than $659 million from crypto firms in 2024. The U.S., Japan, and South Korea released a joint statement confirming these incidents. The statement said that hackers used social engineering, fake job applications, and malware such as AppleJeus and TraderTraitor to access internal systems. North Korean IT workers were also identified as insider threats to private crypto companies. These workers often apply for remote roles, pretending to be citizens of other countries. Once hired, they can access sensitive data or move funds internally. North Korean Lazarus Group Tied to Major Crypto Theft Cases Moreover , the Lazarus Group, North Korea’s state-backed hacker unit, has been linked to several large attacks. These include crypto thefts from Bybit, Upbit, Radiant Capital, and DMM Bitcoin. Blockchain researcher ZachXBT found that some decentralized finance (DeFi) protocols rely heavily on transactions from North Korea. In some cases, nearly 100% of monthly traffic came from DPRK-linked wallets. Above all, Kraken’s exposure of the job applicant confirms the growing pattern of North Korean hacker groups targeting the crypto industry. The incident adds to the list of DPRK-linked cyber attacks that use employment and social engineering as entry points.
You may also like
Bank of Korea defends bank-first stablecoin plan amid bill deadlock
JPMorgan says bitcoin's main risk isn't Strategy, but blockchain adoption that doesn't benefit public chains and tokens
Fear & Greed Index Today: What Extreme Fear Means for Crypto, Stocks and Gold
The Crypto Fear & Greed Index has fallen to Extreme Fear as Tesla, Intel and the Nasdaq declined. See what it means for traders and explore stocks, crude oil and gold in the WEEX TradFi Trading Challenge.
Labour MPs Push to Make UK Crypto Donation Ban Permanent
Supreme Court ruling expanding Trump's authority over federal agencies raises questions for SEC, CFTC as crypto rulemaking advances
'Bottom building in progress': Analysts say bitcoin holder capitulation signals late-stage bear market
A Comprehensive Analysis: Starting from 1996, Who is Laying the Foundation for the Next Generation of Capital Markets
Luke Dashjr, the Biggest Anti-Spammer of Bitcoin, Inscribed Phrases on the Network in 2011
Whales bought 270,000 BTC while ETFs bled $7 billion. One side is wrong
The crypto IPO class of 2025-26 is down as much as 89%. Autopsy of a listing boom
Robinhood Chain Mining Guide: A Comprehensive Tutorial from Cross-Chain to Memecoin
BitGo CEO says single-digit percentages of bitcoin's supply are 'probably right' for large holders amid Strategy's sale
Beyond Private Keys: How to Safeguard the Security Boundaries of Web3 from Wallets, L2 to Supply Chains?
Vanguard Enters the Market, Opening a New Crypto Gateway for 50 Million Traditional Investors
Why the OUSD Alliance of 150 Companies Still Cannot Shake USDT and USDC?
Citigroup Analysis: Is There Still 47% Upside for Nvidia? Can Rubin and CPO Deliver?
WEEX API Fast Connect: Turn Every Sign-In Into a Live Trader in Under 10 Seconds
WEEX API Fast Connect is a one-click OAuth authorization system that lets your users link their WEEX account without ever touching an API key. Frictionless onboarding, faster conversions, higher retention — built for WEEX Broker partners.
Bitcoin's dwindling exchange reserves don't pack the same bullish punch anymore
Bank of Korea defends bank-first stablecoin plan amid bill deadlock
JPMorgan says bitcoin's main risk isn't Strategy, but blockchain adoption that doesn't benefit public chains and tokens
Fear & Greed Index Today: What Extreme Fear Means for Crypto, Stocks and Gold
The Crypto Fear & Greed Index has fallen to Extreme Fear as Tesla, Intel and the Nasdaq declined. See what it means for traders and explore stocks, crude oil and gold in the WEEX TradFi Trading Challenge.
Labour MPs Push to Make UK Crypto Donation Ban Permanent
Supreme Court ruling expanding Trump's authority over federal agencies raises questions for SEC, CFTC as crypto rulemaking advances
'Bottom building in progress': Analysts say bitcoin holder capitulation signals late-stage bear market
Customer Support:@weikecs
Business Cooperation:@weikecs
Quant Trading & MM:bd@weex.com
VIP Program:support@weex.com
