Key Takeaways
- A new Google Threat Intelligence report highlighted the growing sophistication of North Korean hackers.
- The report warned that these hackers now actively target European blockchain and crypto firms.
- The increased job infiltration activity in Europe comes amid growing scrutiny in the U.S.
Software giant Google has warned that North Korean hacking groups are expanding the scale and scope of their operations to target more firms after increased scrutiny in the U.S.
The Google Threat Intelligence report highlighted that the North Korean hacking group is now actively targeting European firms.
North Korean Hackers Infiltrate European Crypto Firms
North Korean hackers are actively targeting European firms in hopes of infiltrating them and then stealing their assets through ransomware or hacking.
According to a study published on April 2 by Jamie Collier, a Google Threat Intelligence Group (GTIG) adviser, fraudulent IT professionals associated with North Korea are creating a global network of false identities in response to growing awareness in the U.S.
“In response to heightened awareness of the threat within the United States, they’ve established a global ecosystem of fraudulent personas to enhance operational agility,” Collier noted.
The Google report noted that IT workers in Europe were recruited through various online platforms such as Upwork, Telegram, and Freelancer. To avoid detection, payment for their services was facilitated through cryptocurrency.
Google and unidentified partners have discovered “login credentials for user accounts of European job websites and human capital management platforms” and North Korean IT professionals “looking for employment in Germany and Portugal.”
The report added that North Korea-linked workers are infiltrating projects linked to blockchain-related projects involving Solana and Anchor/Rust innovative contract development and a blockchain job marketplace built using the MERN stack and Solana.
North Korean Hackers Increase in Sophistication
Reports about North Korean hackers infiltrating crypto firms to install malware on their systems and steal cryptocurrency first appeared in 2023.
At the time, these hackers were mostly focused on American companies. However, law enforcement authorities issued public notices about them, helping firms avoid such threat actors.
Investigators have found “fabricated personas, including resumes listing degrees from Belgrade University in Serbia and residences in Slovakia, as well as instructions for navigating European job sites.”
One document provided specific guidance on seeking employment in Serbia, including using a Serbian time zone during communications.
The documents also revealed information on acquiring false passports to provide credentials that allow them to establish a right to work or open bank accounts.
Prashant Jha is a seasoned crypto journalist based in Delhi, India, with a Bachelor’s Degree in Computer Science Engineering. Passionate about the evolving world of blockchain and cryptocurrencies, he has been a dedicated voice in the industry since 2018. Prashant’s expertise lies in regulatory reporting, where he unravels complex legal and financial developments with clarity and precision. Before joining CCN in 2024, he honed his craft at Cointelegraph, establishing himself as a trusted name in crypto journalism.
His coverage spans major industry events, including the high-profile collapses of FTX, Three Arrows Capital (3AC), and LUNA, offering readers insightful analyses of their regulatory and market implications. Prashant’s technical background enables him to bridge the gap between intricate blockchain technology and its real-world applications, making his work accessible to novices and experts.
Beyond his professional pursuits, Prashant is an avid music enthusiast, often exploring diverse genres to unwind. A sports lover, he has a particular passion for cricket and frequently engages in discussions about the game. His multifaceted interests and sharp journalistic instincts make him a valuable contributor to CCN, where he continues shaping the crypto landscape's narrative.
