๐ฐ๐ตScale of North Korea's Attacks on the Crypto IndustryAccording to the UN, North Korean hackers have stolen crypto assets worth about $3 billion over the past 6 years. In 2023 alone, the damage amounted to at least $600 million.
Attack Methods:Social Engineering: Creating fake profiles on LinkedIn and other social networks to establish contact with employees of crypto companies.
Phishing: Sending malicious emails to gain access to company systems.
Supply Chain Attacks: Hacking software providers like JumpCloud and JetBrains to distribute malicious code.
Vulnerability Exploitation: Exploiting security breaches in crypto protocols and smart contracts.
Attack Examples:
- Poloniex: Exchange hack in November 2023, $131.4 million stolen.
- HTX (formerly Huobi): Attack on the exchange and related Heco cross-chain bridge, $113.3 million stolen.
- Euler Finance Attack: Nearly $200 million stolen by exploiting a smart contract vulnerability.
- Bithumb, Yapizon, Youbit: Series of attacks on South Korean exchanges in 2017 with total damage of $82.7 million.
Consequences for the Industry:Crypto companies are tightening hiring procedures and employee verification, especially for remote positions. Some firms are even refusing to hire developers from certain countries due to increased security risks.
Authorities' Response:
- The FBI and other law enforcement agencies are urging crypto companies to strengthen security measures, including multi-factor authentication and limiting access to critical systems.
- The UN recommends tightening sanctions against North Korean hacking groups and increasing control over laundering of stolen funds.
๐ Scams Daily
