In a cybersecurity twist that sounds more like espionage fiction than reality, Kraken recently intercepted an attempted infiltration by a North Korean hacker—disguised as a job seeker.
What started as an ordinary recruitment process quickly raised eyebrows when an applicant submitted inconsistent identity details and appeared to be guided through their interview in real time, shifting voices mid-conversation. Behind the scenes, Kraken’s security team flagged the behavior and began quietly investigating.
The situation escalated when one of the applicant’s emails matched a list shared among crypto firms—addresses suspected of being tied to sanctioned North Korean actors. A deeper probe uncovered a sprawling network of fake identities used to apply for jobs across the industry, some of which had already slipped past company defenses.
Rather than rejecting the candidate outright, Kraken advanced the individual through staged interview rounds—deliberately buying time to gather intelligence. The trap was set during a final call with the exchange’s Chief Security Officer. A series of live verification questions—ranging from local geography to ID confirmation—left the applicant scrambling and ultimately exposed the deception.
Kraken’s report emphasized that cybersecurity threats now reach far beyond traditional attack surfaces. In an era of AI-generated personas and social engineering, even the HR inbox has become a potential vector for compromise.
The individual in question, Kraken later confirmed, was tied to broader North Korean operations estimated to have drained over $650 million from crypto platforms in 2024 alone.
The company concluded with a stark reminder: not all attacks come through code. Sometimes, they start with a résumé.
President Javier Milei has been cleared of any ethical misconduct by Argentina’s Anti-Corruption Office after a controversial memecoin post led to investor losses topping $250 million.
ALEX Protocol, a DeFi platform built on Bitcoin’s Stacks layer, has suffered a second major breach—this time resulting in an estimated $14 million loss.
A Ukrainian man has been arrested for allegedly orchestrating a years-long cryptojacking scheme that compromised thousands of online accounts tied to a global hosting provider, authorities revealed this week.
An extensive international cybercrime network has been brought down after law enforcement seized 145 domains linked to BidenCash, a notorious online marketplace that thrived on trading stolen credit card data and compromised digital identities.