Kraken Catches North Korean Hacker Posing as Job Applicant in Major Crypto Security Breach
By: coinchapter|2025/05/03 06:00:05
0
Share
Kraken, a major crypto exchange, exposed a North Korean hacker who applied for a job using a fake identity. The incident was revealed in a May 1 blog post. The person posed as an engineering candidate named Steven Smith. Kraken’s security and recruitment teams moved the candidate through the hiring process to investigate. They later confirmed that the applicant was part of a wider network tied to North Korean state-sponsored cybercrime. The person used a suspicious email connected to known North Korean hacker activity. The candidate changed their name during interviews and altered their voice several times. Kraken also detected signs of outside coaching. Fake Identities and Technical Red Flags Detected An internal Open-Source Intelligence (OSINT) investigation exposed the use of multiple fake identities by the applicant. Several of these identities had prior links to crypto firms. One of them appeared on the U.S. sanctions list. Kraken identified clear inconsistencies during the process. The applicant accessed remote Mac computers through a Virtual Private Network (VPN). They also submitted altered identification documents. These actions raised concerns about planned infiltration. During the final interview, Kraken’s Chief Security Officer Nick Percoco questioned the applicant. The hacker failed to confirm their location or citizenship. Percoco told CBS. Huione Group Accused of Aiding North Korean Crypto Crimes The Financial Crimes Enforcement Network (FinCEN) proposed banning the Huione Group from the U.S. financial system. The Cambodia-based group allegedly helped North Korean hackers move stolen funds. U.S. Treasury Secretary Scott Bessent stated, FinCEN found that Huione laundered over $4 billion between August 2021 and January 2025. Their platforms—Huione Pay, Huione Crypto, and Haowang Guarantee—were used for payment services connected to crypto crimes. The ban would block Huione from accessing U.S. correspondent banking services. Officials said this would weaken DPRK cybercrime operations and disrupt money laundering channels. DPRK Hackers Use Social Engineering and Malware to Target Crypto North Korea-linked hackers stole more than $659 million from crypto firms in 2024. The U.S., Japan, and South Korea released a joint statement confirming these incidents. The statement said that hackers used social engineering, fake job applications, and malware such as AppleJeus and TraderTraitor to access internal systems. North Korean IT workers were also identified as insider threats to private crypto companies. These workers often apply for remote roles, pretending to be citizens of other countries. Once hired, they can access sensitive data or move funds internally. North Korean Lazarus Group Tied to Major Crypto Theft Cases Moreover , the Lazarus Group, North Korea’s state-backed hacker unit, has been linked to several large attacks. These include crypto thefts from Bybit, Upbit, Radiant Capital, and DMM Bitcoin. Blockchain researcher ZachXBT found that some decentralized finance (DeFi) protocols rely heavily on transactions from North Korea. In some cases, nearly 100% of monthly traffic came from DPRK-linked wallets. Above all, Kraken’s exposure of the job applicant confirms the growing pattern of North Korean hacker groups targeting the crypto industry. The incident adds to the list of DPRK-linked cyber attacks that use employment and social engineering as entry points.
You may also like

Morning Report | CoinEx becomes a key hub for Iran to evade sanctions, involving over $3.8 billion in funds; Kalshi seeks a new round of financing, with a valuation potentially rising to $40 billion
Overview of Important Market Events on June 25

From the white-haired stock god to the billionaire fund mogul, the smart people shorting Nvidia are all getting rich using the same framework
Give up on heavily investing in Nvidia's "nine major bottlenecks"! This article analyzes the underlying logic behind top AI investors making billions: physical infrastructure such as electricity, HBM, and optical interconnects are the true keys to wealth in AI hardware.

Why do cryptocurrency projects always like to change their names?
In many cases, the old names of encryption projects have no competitive advantage, only historical baggage.

Global Launch: As predictions become the most scarce asset in the AI era, Manadia is defining the next generation of the value internet
The trusted AI prediction ecosystem Manadia, which has secured $7 million in funding from well-known institutions like OKX, will globally launch in June. The core token UMXM has already been listed on multiple mainstream platforms, inviting you to seize the new blue ocean of the trillion-level predi...

Who is footing the bill for the $64 billion accounting frenzy?
Affected by Bitcoin falling below $60,000, publicly listed companies heavily invested in this asset are facing huge paper losses and valuation discounts, and their debt structure and accounting standards may trigger structural liquidity risks in the future.

I never expected that the first application of AI x Crypto would be in security auditing
AI has accelerated attack efficiency and also promoted the upgrade of defense systems. The security audit sector is undergoing a transition from a dividend model to a competitive model.

What is your view on Binance's competitive advantages?
When the dividends of rule arbitrage gradually approach zero, can we produce product strength, governance capability, and trust that are commensurate with its scale?

ETH has entered a non-consensus phase, and the turning point is approaching!
This has nothing to do with the Ethereum Foundation or Ethlabs; Ethereum needs to win by solving real problems.

The shift in the cloud of the air: from despising stablecoins a year ago to the high-profile entry of capital today
It can continue to question the cost-effectiveness of stablecoins in the G10 currency corridor, but it cannot ignore the structural opportunities of stablecoins in emerging markets, corporate finance, and on-chain settlements.

The survival dilemma of small and medium exchanges behind the withdrawal anomalies exposed by AscendEX
The living space is constantly being compressed.

Why Is Bitcoin Falling Below $60K? 5 Key Market Drivers Explained
Bitcoin has dropped sharply amid ETF outflows, Strategy stock weakness, AI stock rallies, and changing Fed expectations. Explore the key forces driving BTC’s latest correction and what traders should watch next.

Bitcoin vs. Gold in 2026: Which Asset Performs Better in Different Markets?
Bitcoin vs. gold in 2026: Why are both assets falling, and what does their changing correlation mean? Discover what drives Bitcoin and gold prices and how traders can navigate different market conditions.

Morning News | The draft amendment to the People's Bank of China Law aims to clarify the legal status of digital renminbi; South Korea will transfer about 40 unregistered virtual asset service providers to law enforcement agencies
Overview of Important Market Events on June 24

The cryptocurrency industry has entered the "Show Me" era: merely relying on vision is no longer enough
The awareness level of the audience in the cryptocurrency industry—including media, institutions, and retail investors—is steadily increasing, and this trend has become a foregone conclusion.

Interpreting the Ethereum Foundation's new structure: Reaffirming self-sovereignty amid institutional trends
The Ethereum Foundation has announced a new five-layer working framework, clarifying the focus of future development and reaffirming its commitment to decentralized core values amidst the wave of institutionalization.

Former SpaceX engineer reconstructs the financial execution system using first principles
Plan Execution Lab completes angel round financing for Singapore family office, with a valuation of 50 million USD.

Standard Chartered Bank sings a 50x rhapsody again, aiming for AAVE to reach 3500 USD
The throne of DeFi lending still exists, but the foundation beneath the throne needs to undergo a reconstruction or reinforcement.

Tidal Investment: We still have a positive outlook on the AI industry chain, but the reasons have changed
The intense financing by tech giants has triggered a panic of "AI peak," but the soaring capital expenditures of the five major cloud vendors and the bottlenecks in physical infrastructure indicate that the AI investment cycle is far from over; the second half of this grand performance has just begu...
Morning Report | CoinEx becomes a key hub for Iran to evade sanctions, involving over $3.8 billion in funds; Kalshi seeks a new round of financing, with a valuation potentially rising to $40 billion
Overview of Important Market Events on June 25
From the white-haired stock god to the billionaire fund mogul, the smart people shorting Nvidia are all getting rich using the same framework
Give up on heavily investing in Nvidia's "nine major bottlenecks"! This article analyzes the underlying logic behind top AI investors making billions: physical infrastructure such as electricity, HBM, and optical interconnects are the true keys to wealth in AI hardware.
Why do cryptocurrency projects always like to change their names?
In many cases, the old names of encryption projects have no competitive advantage, only historical baggage.
Global Launch: As predictions become the most scarce asset in the AI era, Manadia is defining the next generation of the value internet
The trusted AI prediction ecosystem Manadia, which has secured $7 million in funding from well-known institutions like OKX, will globally launch in June. The core token UMXM has already been listed on multiple mainstream platforms, inviting you to seize the new blue ocean of the trillion-level predi...
Who is footing the bill for the $64 billion accounting frenzy?
Affected by Bitcoin falling below $60,000, publicly listed companies heavily invested in this asset are facing huge paper losses and valuation discounts, and their debt structure and accounting standards may trigger structural liquidity risks in the future.
I never expected that the first application of AI x Crypto would be in security auditing
AI has accelerated attack efficiency and also promoted the upgrade of defense systems. The security audit sector is undergoing a transition from a dividend model to a competitive model.
Customer Support:@weikecs
Business Cooperation:@weikecs
Quant Trading & MM:bd@weex.com
VIP Program:support@weex.com
