In a cybersecurity twist that sounds more like espionage fiction than reality, Kraken recently intercepted an attempted infiltration by a North Korean hacker—disguised as a job seeker.
What started as an ordinary recruitment process quickly raised eyebrows when an applicant submitted inconsistent identity details and appeared to be guided through their interview in real time, shifting voices mid-conversation. Behind the scenes, Kraken’s security team flagged the behavior and began quietly investigating.
The situation escalated when one of the applicant’s emails matched a list shared among crypto firms—addresses suspected of being tied to sanctioned North Korean actors. A deeper probe uncovered a sprawling network of fake identities used to apply for jobs across the industry, some of which had already slipped past company defenses.
Rather than rejecting the candidate outright, Kraken advanced the individual through staged interview rounds—deliberately buying time to gather intelligence. The trap was set during a final call with the exchange’s Chief Security Officer. A series of live verification questions—ranging from local geography to ID confirmation—left the applicant scrambling and ultimately exposed the deception.
Kraken’s report emphasized that cybersecurity threats now reach far beyond traditional attack surfaces. In an era of AI-generated personas and social engineering, even the HR inbox has become a potential vector for compromise.
The individual in question, Kraken later confirmed, was tied to broader North Korean operations estimated to have drained over $650 million from crypto platforms in 2024 alone.
The company concluded with a stark reminder: not all attacks come through code. Sometimes, they start with a résumé.
A Massachusetts man has been handed a six-year prison sentence after federal authorities exposed his unlicensed crypto operation, which laundered over $1 million under the guise of a vending machine business.
The decentralized exchange Cetus, built on the Sui blockchain, has been hit with one of the largest DeFi exploits of the year, losing over $220 million in crypto assets.
An effort by Bitcoin SV investors to seek billions in compensation from major crypto exchanges has largely fallen flat in the UK Court of Appeal.
A previously undisclosed security breach has exposed sensitive user data of nearly 70,000 Coinbase customers, following what appears to be an internal compromise involving bribed support staff.