The FBI has issued a new warning about North Korean hackers targeting employees at decentralized finance (DeFi) and cryptocurrency firms. According to the alert dated September 3, these cybercriminals are using sophisticated social engineering techniques to steal funds from these companies. The tactics include posing as reputable figures or offering fictitious job or investment opportunities to plant malware.
Employees within the cryptocurrency industry, particularly those connected to exchange-traded funds (ETFs), are being meticulously researched by these scammers. They engage potential victims in extended dialogues to build trust and introduce malware through seemingly innocuous means such as pre-employment tests or document downloads. The FBI notes that these scammers are proficient in English and possess a deep understanding of cryptocurrency, making their deceit more convincing.
Since 2017, these efforts have led to approximately $3 billion in stolen crypto assets, with many attacks attributed to the notorious Lazarus Group, a cybercrime syndicate linked to North Korea. This warning follows multiple advisories from the FBI regarding the rise in sophisticated phishing attacks within the cryptocurrency sector, urging industry workers to exercise increased vigilance.