Harmony

CoinsPaid

Ronin

when

Meta

The North Korean hacker group Lazarus is using LinkedIn to target vulnerable users and steal their assets via targeted malware attacks.
The incident came to light after blockchain security analytics firm SlowMist revealed that Lazarus group hackers are pretending to look for jobs as blockchain developers in the cryptocurrency industry through LinkedIn. 
SlowMist claimed hackers steal confidential employee credentials after inviting access to their repository to run relevant code. The code snippets the hacker runs contain malicious code that steals confidential information and assets.
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-04/a44c5959-9e18-4647-afb4-f906b34fba93.png" alt="" title="">
 <figcaption style="text-align: center;">
 Source: <a href="https://x.com/im23pds/status/1782984061369405878" target="_blank" rel="noopener nofollow">SlowMist</a>
 </figcaption>
</figure>
Using LinkedIn for targeted attacks is not a new method, and the North Korean hacker group used a similar <a href="https://www.forbes.com/sites/petersuciu/2023/10/03/north-korean-hackers-masqueraded-as-meta-recruiters-on-linkedin/?sh=367d6a773051" target="_blank" rel="noopener nofollow">tactic</a>&nbsp;in December 2023, posing as a fake Meta recruiter. 
After contacting victims via LinkedIn, the fake recruiter requested that the targeted “applicants” download two coding challenges as part of the hiring procedure. These two coding files contained malware, and when they were run on a work computer, they released a Trojan that allowed remote access.
Lazarus has <a href="https://cointelegraph.com/news/north-korean-hackers-stolen-crypto">stolen over $3 billion in crypto assets</a>. It is among the most&nbsp;notorious and organized hacking groups that first surfaced in 2009 and continues to target crypto firms despite numerous sanctions against it.
Lazarus is known for using innovative ways to target and steal funds. In August 2023, the group used <a href="https://cointelegraph.com/news/coinspaid-claims-north-korean-hacking-group-fake-job-interview-theft">fake job interviews to steal $37 million</a> from crypto payment firm CoinPaid. The hackers attempted to infiltrate CoinsPaid infrastructure by targeting individuals through fake high-salary job offers.
Related: <a href="https://cointelegraph.com/news/us-treasury-sanctions-crypto-mixer-north-korea">US Treasury sanctions crypto mixer Sinbad, alleging North Korea ties</a>
The group has been behind some of the biggest heists in the crypto industry. The 2022&nbsp;<a href="https://cointelegraph.com/news/north-korean-lazarus-group-allegedly-behind-ronin-bridge-hack">Ronin Bridge hack</a> is its biggest, with $625 million stolen. 
The hacker group often uses crypto mixing services to launder its stolen funds back to North Korea, which, according to many reports, are used to fund the country’s military operations.
Although crypto firms are often the target of hacker groups, the decentralized nature of blockchain makes it difficult for them to move their funds. Once identified, they are often tracked and blocked with the help of crypto platforms. 
In February 2023, Huobi and Binance <a href="https://cointelegraph.com/news/binance-and-huobi-freeze-1-4m-in-crypto-linked-to-north-korean-hackers">froze $1.4 million worth of crypto assets</a> linked to North Korea. Similarly, $63 million worth of assets linked to the <a href="https://cointelegraph.com/news/north-korea-s-lazarus-group-masterminded-100m-harmony-hack-fbi-confirms">Harmony Bridge hack</a> was also frozen by crypto exchanges.
Magazine:&nbsp;<a href="https://cointelegraph.com/magazine/deposit-risk-crypto-exchanges-money/">Deposit risk: What do crypto exchanges really do with your money?</a>

North Korean Lazarus hacker group using LinkedIn to target and steal assets: Report

Cointelegraph

Other articles published on Apr 24, 2024

Bank of England scared to cut interest rates too soon

Beware! Crypto hacker group targets LinkedIn users: Report

Zulu Network: Moving the Bitcoin Economy Forward With a Two-Tiered Bitcoin Layer 2 Architecture

European Central Bank’s Passive Role Fails to Curb Bitcoin Scams

Ripple’s XRP Gains Traction: Analyzing Current Price Movements and Potential Impacts

Exploring YOYOW: A Cryptocurrency Empowering Content Creators

Join our free newsletter for daily crypto updates!