A recent report by cybersecurity firm Silent Push reveals how North Korean hackers established legitimate companies in the US to attack cryptocurrency developers.
Operation Details
North Korean hackers created two US-registered companies, Blocknovas LLC and Softglide LLC. By using fake job advertisements, they lured cryptocurrency developers to implant malware into their systems.
Connection to Lazarus Group
The operation has been linked to the Lazarus Group, an elite hacking team operated under North Korea's Reconnaissance General Bureau. This group is known for conducting cyberattacks abroad.
Sanction Violations and Financing Goals
The establishment of North Korean companies in the US constitutes a violation of Treasury Department sanctions and United Nations restrictions. Such operations are believed to finance North Korea's nuclear ambitions.
The situation demonstrates the ability of North Korean hackers to establish legitimate business structures for committing cybercriminal activities, raising concerns among international organizations.
