Discord

Security

Indexed Finance

According to South Korea’s National Police Agency, the hackers stole the information of 1,468 victims between March and October 2023.
<a href="https://crypto.news/tag/north-korea/" target="_blank" rel="noopener noreferrer nofollow">North Korean</a> hackers are now trying to lure victims by pretending to be South Korean officials and journalists in a bid to steal crypto.
According to a Korean local newspaper Korea JoongAng Daily, DPRK-linked cybercriminals <a href="https://koreajoongangdaily.joins.com/news/2023-11-22/national/northKorea/Norths-hackers-pose-as-officials-journalists-to-steal-info-and-crypto/1919045" target="_blank" rel="noopener noreferrer nofollow">stole</a> the information of 1,468 victims between March and October 2023, including 57 incumbent or “retired government officials in diplomacy, military and national security.”
The police say North Korea has doubled down on its efforts to steal private data via email phishing, impersonating the South Korean National Police Agency, National Health Insurance Service, National Pension Service and National Tax Service. According to the report, the hackers are using clickbait words such as “notice” or “questionnaire” to lure victims.
You might also like: <a href="https://crypto.news/lazarus-group-hackers-from-country-with-no-internet-threaten-defi/" rel="noopener noreferrer nofollow"> Lazarus Group: hackers from country with no internet threaten defi </a>
Once victims open links included in the email, a malware creates hidden channels on computer and mobile devices to steal personal data. The police believe that the latest activity is part of North Korea’s efforts aimed at stealing crypto, as nearly two dozen victims’ IDs and profiles were used to get access to their crypto trading accounts, without disclosing which crypto platforms were under radar.
In early Nov. 2023, crypto.news <a href="https://crypto.news/north-korea-targets-blockchain-engineers-with-new-macos-malware/" target="_blank" rel="noopener noreferrer nofollow">reported</a> that the infamous North Korean hacking group Lazarus has started distributing a malicious Python app posing as a crypto arbitrage bot via a direct message on a public Discord server. According to Elastic Security Labs, the so-called Kandykorn malware is being distributed in a form of a ZIP archive.
You might also like: <a href="https://crypto.news/north-korean-ties-suspected-in-indexed-finance-treasury-attack/" rel="noopener noreferrer nofollow"> North Korean ties suspected in Indexed Finance treasury attack </a>

DPRK hackers impersonate South Korean officials to steal crypto

crypto.news

Other articles published on Nov 22, 2023

Latest Market Overview 22nd Nov: BTC, ETH, BNB, XRP, SOL, ADA, DOGE, TON, LINK, AVAX

Bankrupt Mt. Gox repayment plan seemingly set in motion nearly a decade after hack

Why Worldcoin became a bit too volatile recently

Solana Dog Coin Bonk (BONK) Rocketed 16% in Flash, Here's What Caused It

ZKSpace (ZKS) Price Prediction 2024, 2025, 2030, 2040, and 2050

Binance CEO Steps Down, Triggers Crypto Market Unrest

Join our free newsletter for daily crypto updates!