1. Introduction
2. North Korea's Attack Methods
3. Protection Recommendations

On September 3, the Federal Bureau of Investigation (FBI) issued a warning about North Korea’s increasingly aggressive targeting of the crypto industry. The agency detailed how North Korean actors are conducting sophisticated social engineering campaigns, particularly against employees of crypto-related businesses, including DeFi applications.

Introduction

In recent months, North Korean actors have been focusing on crypto exchange-traded funds (ETFs), indicating potential future attacks on companies linked to crypto ETFs or other related financial products. The report described the North Korean tactics as “complex and elaborate,” emphasizing that the goal is to deceive employees through social engineering and then deploy malware to steal cryptocurrency.

North Korea's Attack Methods

The FBI warned companies in the cryptocurrency sector that North Korea’s advanced tactics make them a significant threat to organizations managing large quantities of crypto assets. The report also cautioned that even individuals with strong cybersecurity knowledge can fall victim to these persistent efforts to compromise networks. A report by Recorded Future, published on November 30, 2023, estimated that North Korea’s Lazarus Group has stolen $3 billion in cryptocurrency between 2017 and 2023, highlighting the effectiveness of their methods.

Protection Recommendations

The FBI outlined several common tactics used by North Korean actors, including extensive pre-operational research, the creation of personalized fake scenarios, and impersonation of legitimate entities or individuals. These attacks often target dozens of employees, with fake scenarios frequently involving job offers or corporate investments, using personal information to build trust. To reduce the risk of such attacks, the FBI recommends implementing unique identity verification methods, avoiding the storage of crypto wallet information on internet-connected devices, and using multi-factor authentication for financial transactions.

The FBI emphasizes that companies and individuals should remain vigilant and take steps to protect against potential attacks. Organizations managing crypto assets should be aware of the sophisticated tactics used by North Korean attackers and implement the recommended security protocols.