Crypto Exchanges
By Maheen Hernandez
1 / 15
A new cybersecurity threat is quietly emerging—and it starts with a job offer that’s too good to be true.
2 / 15
This strategy marks a shift from the typical smash-and-grab hacks seen in earlier years. Instead, it shows a more calculated and deceptive campaign, where the attack begins with…
3 / 15
The latest report from cybersecurity firm Huntress, released on June 18, outlines a disturbing pattern.
4 / 15
After some email exchanges, the developers are invited to a Zoom interview, only to be greeted by what appears to be a company executive.
5 / 15
Candidates are then sent a file to complete a "technical assessment." In one case, the file named zoom_sdk_support.
6 / 15
The open-source nature of crypto development means that a single developer may have high-level access to critical systems, including smart contracts, bridges, and wallets.
7 / 15
This imbalance gives threat actors a dangerous opportunity. If even one well-positioned developer is compromised, it can lead to wide-scale breaches.
8 / 15
Not Just a Scam—A State-Sponsored Strategy
9 / 15
What sets this campaign apart is the level of coordination and funding behind it. These are not ordinary cybercriminals.
10 / 15
Since 2017, the regime’s hackers have stolen over $1.5 billion in crypto assets. The $620 million Ronin/Axie Infinity breach in 2022 and the recent $1.
11 / 15
In a statement, Sue J. Bai of the U.S. Department of Justice’s National Security Division confirmed the seriousness of the operation.
12 / 15
The attackers are using advanced deception techniques to infiltrate companies and gain trust.
13 / 15
Once inside a system, the malware begins scanning for browser-based wallets like MetaMask and Phantom, extracting wallet.
14 / 15
Security experts from Huntress and Unit 42 have tracked multiple malware variants including BeaverTail, InvisibleFerret, and OtterCookie—all designed with modular and…
15 / 15
The Bigger Picture: Pyongyang’s Growing Digital Army
The Currency Analytics
Want the full story?