CoinsValue.net logo CoinsValue.net logo
Crypto Potato 2025-09-20 21:06:34

CZ Warns Crypto Firms of North Korean Hacker Threats

Binance founder Changpeng Zhao (CZ) has issued a warning to crypto projects about North Korean hackers. He detailed how the group is using increasingly sophisticated tactics to gain access to companies. Operatives Are Exploiting Hiring Process CZ shared his concerns via a September 18 X post, describing the hackers as “advanced, creative, and patient.” He explained how the most common method used by these individuals involves posing as job candidates to secure roles in companies, particularly in developer, security, and finance positions, giving them a “foot in the door.” In other cases, the group poses as employers and attempts to interview staff, using the process to distribute malware. Zhao noted that during these sessions, the attackers often claim there is a problem with Zoom and then send a link to an “update” carrying a virus, or they provide coding questions followed by “sample code” embedded with malware. Another tactic involves pretending to be users who file customer support requests containing malicious links. CZ added that hackers also pay or bribe employees and hired vendors to gain access to data, pointing to a recent case in India where an outsourcing service was compromised, resulting in the leak of data from a major U.S. exchange and losses exceeding $400 million. This alert follows the release of a report by cybersecurity group Security Alliance (SEAL), profiling over 60 impostors linked to North Korean operations. The report says that these attackers built fake LinkedIn profiles, set up GitHub portfolios, and used forged government IDs to make their applications look real. Shift in Methods North Korean hackers have always been a major threat in the crypto industry, with over $1.3 billion worth of assets stolen in 2024 alone. Traditionally, they have relied on phishing, malware, and private key compromises to loot from exchanges. However, recent reports suggest they are moving towards targeting human resources. A separate investigation by ZachXBT also uncovered how a small DPRK team of five IT workers operated over 30 fake identities at crypto firms. Elsewhere, Coinbase also recently reported a similar threat from these bad actors. The exchange shared that they are increasingly targeting their remote worker policy to infiltrate sensitive systems. CEO Brian Armstrong has since announced changes to the company’s internal security protocols, including mandatory in-person onboarding in the U.S., fingerprinting, and U.S. citizenship requirements for employees with system-level access. The exchange also introduced stricter interview procedures, such as requiring cameras to remain on, to prevent impersonation and AI-assisted coaching. In light of the growing threat to the job market, CZ has urged crypto platforms to train their employees not to download files and to screen potential candidates carefully. The post CZ Warns Crypto Firms of North Korean Hacker Threats appeared first on CryptoPotato .

Leggi la dichiarazione di non responsabilità : Tutti i contenuti forniti nel nostro sito Web, i siti con collegamento ipertestuale, le applicazioni associate, i forum, i blog, gli account dei social media e altre piattaforme ("Sito") sono solo per le vostre informazioni generali, procurati da fonti di terze parti. Non rilasciamo alcuna garanzia di alcun tipo in relazione al nostro contenuto, incluso ma non limitato a accuratezza e aggiornamento. Nessuna parte del contenuto che forniamo costituisce consulenza finanziaria, consulenza legale o qualsiasi altra forma di consulenza intesa per la vostra specifica dipendenza per qualsiasi scopo. Qualsiasi uso o affidamento sui nostri contenuti è esclusivamente a proprio rischio e discrezione. Devi condurre la tua ricerca, rivedere, analizzare e verificare i nostri contenuti prima di fare affidamento su di essi. Il trading è un'attività altamente rischiosa che può portare a perdite importanti, pertanto si prega di consultare il proprio consulente finanziario prima di prendere qualsiasi decisione. Nessun contenuto sul nostro sito è pensato per essere una sollecitazione o un'offerta