In a cybersecurity twist that sounds more like espionage fiction than reality, Kraken recently intercepted an attempted infiltration by a North Korean hacker—disguised as a job seeker.
What started as an ordinary recruitment process quickly raised eyebrows when an applicant submitted inconsistent identity details and appeared to be guided through their interview in real time, shifting voices mid-conversation. Behind the scenes, Kraken’s security team flagged the behavior and began quietly investigating.
The situation escalated when one of the applicant’s emails matched a list shared among crypto firms—addresses suspected of being tied to sanctioned North Korean actors. A deeper probe uncovered a sprawling network of fake identities used to apply for jobs across the industry, some of which had already slipped past company defenses.
Rather than rejecting the candidate outright, Kraken advanced the individual through staged interview rounds—deliberately buying time to gather intelligence. The trap was set during a final call with the exchange’s Chief Security Officer. A series of live verification questions—ranging from local geography to ID confirmation—left the applicant scrambling and ultimately exposed the deception.
Kraken’s report emphasized that cybersecurity threats now reach far beyond traditional attack surfaces. In an era of AI-generated personas and social engineering, even the HR inbox has become a potential vector for compromise.
The individual in question, Kraken later confirmed, was tied to broader North Korean operations estimated to have drained over $650 million from crypto platforms in 2024 alone.
The company concluded with a stark reminder: not all attacks come through code. Sometimes, they start with a résumé.
The U.S. Department of Justice has sentenced Dwayne Golden, 57, of Pennsylvania to 97 months in prison for orchestrating a fraudulent crypto investment scheme that stole over $40 million from investors.
The first half of 2025 has become the most damaging six-month period in crypto history, with over $2.1 billion stolen across 75+ separate incidents, according to new data.
A new breed of cyber-attack is sweeping through crypto media, exploiting site pop-ups and wallet-connect prompts instead of smart-contract bugs.
CoinMarketCap, one of the most widely used crypto data tracking platforms, is reportedly facing a front-end security breach, with multiple users encountering a suspicious prompt to verify their wallets.