North Korean IT workers are expanding their operations beyond the US, infiltrating blockchain projects in the UK and other European countries.
Expanding Operations Beyond the US
According to Jamie Collier from Google's Threat Intelligence Group, North Korean IT specialists have increased their operations outside the US due to heightened scrutiny. They are creating a global network of fraudulent personas to maintain operational flexibility and are seeking roles in UK crypto projects. These workers are involved in both traditional web development and advanced blockchain applications, such as Solana and Anchor projects.
North Korea Targets Europe
Besides the UK, North Korea is actively seeking opportunities in Europe. Collier reports that some workers have used fake identities and resumes listing degrees from Belgrade University in Serbia, while residing in Slovakia. Attempts to secure employment in Germany and Portugal were also discovered.
Cyber Attacks by North Korean Hackers
North Korean hackers have increased the number of attacks and extortion attempts recently. In October, workers fired from IT companies threatened to provide data to competitors. In January, the US Department of Justice indicted two North Korean nationals for IT work fraud. There has also been an increase in incidents where North Korean hackers infiltrate confidential video calls using fake Zoom invitations.
The infiltration of North Korean IT specialists into European blockchain projects raises significant concerns due to espionage risks and potential cyber attacks. Vigilance and data security are increasingly important in countering such threats.