As a seasoned researcher with a penchant for cybersecurity and a soft spot for cryptocurrencies, I find this FBI warning about North Korean hackers targeting DeFi and crypto companies a stark reminder of the dynamic and evolving nature of digital threats. With over a decade of experience under my belt, I’ve seen countless cyberattacks, but these state-sponsored actors have always managed to surprise me with their cunning tactics.


The FBI has issued an alert about North Korean cybercriminals aiming attacks at workers of digital currency and finance companies based on blockchain (DeFi). In a recent public advisory, the FBI outlined how these state-backed hackers employ sophisticated social manipulation methods to penetrate organizations and make off with cryptocurrencies

As an analyst, I can’t stress enough the importance of being vigilant, given the FBI’s warning that North Korean actors employ a variety of tactics to infiltrate decentralized finance (DeFi) organizations and cryptocurrency platforms. They meticulously gather intel on their targets and create highly convincing disguises. Often, their aim is to trick employees into granting them access to crucial and secure systems under false pretenses

In their most recent public service announcement, the FBI emphasizes that cyber attackers are persistent and highly skilled, using information from social media and job websites to pretend to be contacts or colleagues within a specific industry. This makes these types of attacks particularly difficult because the attackers not only have fluency in English but also possess knowledge about cryptocurrencies

For example, starting from 2017, the Lazarus Group, a team of hackers believed to be from North Korea, has reportedly swindled approximately $3 billion in cryptocurrency using various scams. It’s important to note that even highly secure organizations can fall victim to such cunning attacks as advised by the FBI

Cryptocurrency Companies Urged to Strengthen Security

The Federal Bureau of Investigation advises cryptocurrency entities to exercise caution as they may encounter social engineering tactics. These tactics often involve fake job offers or investment invitations, threats to postpone downloading applications on work devices, or switching communication channels to different social media platforms

To keep confidential data safe, it’s advisable for businesses to avoid storing cryptocurrency wallet details on internet-exposed devices, restrict access to essential business networks, and utilize multi-step verification methods

The PSA also stresses the need to promote awareness of these threats among the public. The FBI has previously cautioned on other crypto-based scams including fake artists who pretend to be affiliated to a law firm.

Read More

2024-09-05 00:19