Kraken revealed an attempt by a North Korean hacker to apply for a job, highlighting growing threats to the crypto industry.
Suspicious Signals Trigger Internal Probe
Kraken's recruitment and security teams became suspicious when the applicant joined via a different name and awkwardly switched voices during the interview — a sign of real-time coaching. Alerted by industry partners about North Korean actors applying for jobs at crypto firms, Kraken cross-checked the applicant's email with a known list of compromised accounts linked to the hacking group.
Turning the Tables Through a Trap Interview
Instead of outright rejecting the applicant, Kraken advanced them through the interview stages to gather more intel. The final stage was a subtle sting operation led by Kraken CSO Nick Percoco, which included location verification questions and ID prompts. The hacker failed the live-test miserably.
New Threats to the Crypto Industry
The incident underscores a new reality for the crypto industry: threats don't just come through code but also through job portals. As Kraken's CSO noted, 'Don't trust, verify' has never been more critical, especially when national security is at stake.
This incident serves as a warning for the crypto industry about the rising threats and the importance of thorough vetting of potential employees.