A recent investigation has uncovered a concerning trend in the crypto industry: a surge in falsified job applications aimed at infiltrating projects for nefarious purposes. According to DL News, many of these deceptive applicants are reportedly North Korean nationals seeking to exploit crypto ventures for activities like data theft, hacking, and asset misappropriation.
Shaun Potts, founder of Plexus, a specialized crypto recruiting firm, described this as a persistent threat akin to hacking within the tech sector—difficult to eradicate entirely but manageable with proactive measures.
The United Nations Security Council’s extensive report highlighted a strategy where over 4,000 North Koreans are covertly seeking employment in technology sectors, including cryptocurrency. The report estimated that such deceptive hiring practices generate up to $600 million annually for North Korea, illustrating the scale of the issue.
Taylor Monahan, lead security researcher at MetaMask, emphasized that North Korea sustains itself by illicitly leveraging resources, conducting IT work, labor, and cyber operations.
Zak Cole, co-founder of Number Group, expressed concern about the industry’s ability to attract genuine talent amidst these challenges, noting difficulties in vetting applicants effectively.
Lazarus Group’s New Tactics on LinkedIn
In a disturbing development, cybersecurity firm SlowMist revealed that the notorious Lazarus Group is now posing as blockchain developers on LinkedIn to infiltrate cryptocurrency companies. Their method involves enticing victims to access repositories for supposed code reviews, where hidden malware extracts confidential information and assets.
This tactic mirrors earlier exploits, such as impersonating recruiters, underscoring the group’s persistence in targeting crypto firms despite international sanctions.
The post North Korean Nationals Reportedly Applying for Crypto Jobs to Infiltrate Projects for Malicious Purposes appeared first on Cryptonews.