North Korean hackers impersonate developers to infiltrate US cryptocurrency companies and steal nearly a million dollars

According to Decrypt, US federal prosecutors announced on Monday that four North Korean nationals impersonated remote developers and infiltrated an Atlanta blockchain startup, stealing nearly $1 million in cryptocurrency. It is alleged that these agents first operated in the United Arab Emirates and then infiltrated cryptocurrency companies in the United States and Serbia as remote IT workers. After gaining trust, they stole funds twice in 2022, totaling $175000 and $740000 respectively, and laundered money using fake identity documents through coin mixers and exchanges. The US Department of Justice has launched coordinated actions in 16 states, sealing 29 financial accounts, 21 fraudulent websites, and approximately 200 computers supporting North Korean IT programs. Security experts warn that this infiltration tactic has become a "standard operating procedure" for North Korea's cyber operations, exploiting vulnerabilities in the remote work culture of the encryption industry to raise funds for its weapons program.