Investigations by blockchain expert ZachXBT have revealed significant North Korean infiltration into the global cryptocurrency developer market.
North Korean Operators in the Crypto Job Market
ZachXBT's investigations showed that a team of five North Korean IT workers used over 30 fake identities, registering on platforms like Upwork and LinkedIn. Researchers examined documents including reports and spreadsheets found in Google Drive, which revealed details of their internal operations. Entries often contained phrases like, 'I can’t understand the job requirement and don’t know what I need to do.'
Hacker Hideouts: Links to Attacks
The group's work is also linked to thefts within the cryptocurrency sector. One wallet associated with the group was connected to a hack at Favrr, where $680,000 was stolen. Additionally, North Korean hackers, known as the Lazarus Group, targeted exchanges, including the largest attack on Bybit, in which $1.5 billion was stolen.
Counteraction Challenges and Security Threats
There are significant difficulties in countering such operations, including poor cooperation between private companies and teams' reluctance to report fraud. ZachXBT noted that while these IT workers are not highly skilled, their persistence and the number of targeted positions make them a threat to the global cryptocurrency industry.
Thus, the growing infiltration of North Korean hackers into the cryptocurrency market raises serious concerns. More effective countermeasure strategies are needed to protect against such threats.