Crypto Exchange Kraken Uncovers North Korean Espionage Plot
By: bitcoinist|2025/05/03 04:15:01
0
Share
Crypto exchange Kraken’s latest security disclosure reads less like a corporate blog post than a field report from the front lines of modern cyber-warfare. Published on 1 May 2025 under the blunt title “How we identified a North Korean hacker who tried to get a job at Kraken,” the account describes in granular detail how a seemingly routine hiring process morphed into what the exchange openly calls “an intelligence gathering operation.” From the first contact, something felt wrong. Recruiters noticed that the applicant “joined under a different name from the one on their resume, and quickly changed it,” a detail the security team later described as the opening note in a symphony of red flags. Moments later, the interview took on an uncanny timbre: “the candidate occasionally switched between voices, indicating that they were being coached through the interview in real time.” Kraken Tricks North Korean Crypto Hacker Kraken’s staff did not rely on intuition alone. The post explains that industry partners had already circulated “a list of email addresses linked to the hacker group,” and one of those addresses matched the résumé in question. Armed with that match, Kraken’s Red Team launched an OSINT dive that exposed what it calls “a larger network of fake identities and aliases” spreading across the crypto employment market. According to the blog, multiple companies had unwittingly hired personas from the same lattice of fabricated résumés, and “one identity in this network was also a known foreign agent on the sanctions list.” Technical inconsistencies began piling up. The exchange recounts how the applicant relied on “remote colocated Mac desktops but interacted with other components through a VPN,” a configuration favoured by operators who need to launder location data. Investigators tied the résumé to a GitHub profile containing an email address that “had been exposed in a past data breach,” and finally concluded that the primary government ID “appeared to be altered, likely using details stolen in an identity theft case two years prior.” With the evidence mounting, Kraken opted for misdirection rather than immediate rejection. The company advanced the applicant through successive stages—in effect baiting the hook. “Instead of tipping off the applicant, our security and recruitment teams strategically advanced them through our rigorous recruitment process – not to hire, but to study their approach,” the blog states. The denouement came in what should have been an informal “chemistry interview” with Chief Security Officer Nick Percoco. The applicant did not realise that every pleasantry was laced with a test. Percoco and his colleagues asked for live two-factor confirmations: show your government ID on camera, report your physical location, name a few local restaurants. “At this point,” the post recounts, “the candidate unraveled. Flustered and caught off guard, they struggled with the basic verification tests, and couldn’t convincingly answer real-time questions about their city of residence or country of citizenship.” Percoco subsequently distilled the lesson from the disclosure: “Don’t trust, verify. This core crypto principle is more relevant than ever in the digital age. State-sponsored attacks aren’t just a crypto, or US corporate, issue – they’re a global threat. Any individual or business handling value is a target, and resilience starts with operationally preparing to withstand these types of attacks .” The blog underscores that the crypto sector’s attack surface is no longer confined to code repositories or hot-wallet infrastructure; it extends to the HR inbox. “Not all attackers break in, some try to walk through the front door,” Kraken writes, adding that “Generative AI is making deception easier, but isn’t foolproof... genuine candidates will usually pass real-time, unprompted verification tests.” In a concluding reflection on organisational culture, the post argues that “a culture of productive paranoia is key. Security isn’t just an IT responsibility. In the modern era, it’s an organizational mindset.” Kraken closes its narrative with a reminder that the candidate was part of the North Korean campaign which, by third-party estimates cited in the post, siphoned more than $650 million from crypto firms in 2024. The message is sober and unsentimental: “Sometimes, the biggest threats come disguised as opportunities.” At press time, BTC traded at $96,825. Featured image created with DALL.E, chart from TradingView.com
You may also like
Upcoming Auction of Token FOLD: What is The Interfold Supported by Vitalik?
The Demystification of AI Collaboration Tools: Is Organizing Reports and Checking Spreadsheets the Most Common Scenario?
Goldman Sachs Trading Desk: The Sell-off of Momentum Stocks in the U.S. is Fierce, Unseen Since 2020! But No 'Panic' Yet, Retail Investors are the Biggest Support
Collateral USD: How does the "second layer dollar" above stablecoins form?
Under the reference framework of the offshore dollar system, once stablecoins are incorporated into the collateral financing chain, it may give rise to a new type of dollar debt based on them—“collateralized dollars.” Whether this layer of debt can be established and whether it is stable depends on ...
How has the Pacific "fever" turned extreme weather into a cash machine for Wall Street?
The extreme weather caused by El Niño is sweeping through the commodity markets, becoming not only a "weather code" for quantitative funds and traders to frantically profit from, but also quietly driving up global food prices and the cost of living for ordinary people.
Trade Spot Market Orders With More Control: WEEX Adds Slippage Tolerance
WEEX Spot now supports Slippage tolerance for market orders, helping users set a maximum acceptable price deviation before placing a market buy or sell order
Morning Report | One week after the full implementation of the EU MiCA, 21 stablecoin issuers and over 270 crypto service providers have obtained regulatory qualifications; Microsoft lays off 4,800 employees, with Xbox accounting for about 3,200 of the...
July 7 Market Important Events Overview
Morning News | SK Hynix officially launches the marketing promotion process for its U.S. stock listing; the Central Cyberspace Administration announces the results of the first phase of rectifying AI application chaos, with over 14,000 non-compliant pr...
July 6 Market Important Events Overview
How has Binance's stock business performed in the 30 days since its launch?
Emerging market buying supported the first wave of demand.
Blockchain Capital Partner: AI is rewriting the fundamental unit of labor
The rise of AI is rewriting the basic unit of labor from "positions" and "companies" to "tasks." When programmable labor meets programmable currency, a production line without companies, salary systems, or HR becomes possible for the first time.
Can Open USD support Stripe's ambitions?
Stripe collaborates with multiple parties to launch OUSD, not only challenging the dominance of USDC but also exposing its trillion-dollar ambition to transition from a "payment interface" to a "next-generation funds settlement network."
Founder of Baixing.com: I believe half of the statement that large language models devour everything
The internet has been shouting for so many years about devouring everything. Has it really devoured everything now? Is it the internet that devours everything, or is it the large models that devour everything? Both are devouring, and nothing is left?
A "legal" robbery? Attackers emptied the BonkDAO treasury by buying tickets
Handing over the keys to the vault to a public vote where "anyone can spend money to participate," without sufficient oversight mechanisms, even the most legitimate governance ideals may turn into the most convenient tools for attackers.
Should You Buy Bitcoin Now? What the Data Says After a 50% Pullback
Should you buy Bitcoin now? Explore Bitcoin's nearly 50% pullback, ETF outflows, on-chain data, Strategy's BTC sale, and historical trends to assess whether July 2026 is a buying opportunity.
WEEX P2P now supports BDT & LKR—Merchant Recruitment Now Open
To make crypto deposits easier, WEEX has officially launched its P2P trading platform and continues to expand fiat support. We're excited to announce that the Bangladeshi Taka (BDT) and Sri Lankan Rupee (LKR) are now available on WEEX P2P!
The cryptocurrency industry has become a traditional industry
For entrepreneurs and retail investors still in this industry, they should either embrace the current changes or explore the next unpredictable field in cryptocurrency.
Chip frenzy cooling down? Morgan Stanley's Wilson: Funds are shifting towards AI supercomputing giants like Microsoft and Amazon
Morgan Stanley's chief equity strategist Wilson pointed out that the momentum in the semiconductor sector is waning, with the Philadelphia Semiconductor Index having dropped nearly 14% from its peak. Funds are shifting towards AI supercomputing giants like Microsoft, Amazon, and Meta, as well as sec...
Morning Report | Vitalik outlines Ethereum's long-term roadmap, Lean Ethereum will become the third major iteration; SK Hynix seeks to attract more AI investors by listing in the U.S
July 5 Market Important Events Overview
Upcoming Auction of Token FOLD: What is The Interfold Supported by Vitalik?
The Demystification of AI Collaboration Tools: Is Organizing Reports and Checking Spreadsheets the Most Common Scenario?
Goldman Sachs Trading Desk: The Sell-off of Momentum Stocks in the U.S. is Fierce, Unseen Since 2020! But No 'Panic' Yet, Retail Investors are the Biggest Support
Collateral USD: How does the "second layer dollar" above stablecoins form?
Under the reference framework of the offshore dollar system, once stablecoins are incorporated into the collateral financing chain, it may give rise to a new type of dollar debt based on them—“collateralized dollars.” Whether this layer of debt can be established and whether it is stable depends on ...
How has the Pacific "fever" turned extreme weather into a cash machine for Wall Street?
The extreme weather caused by El Niño is sweeping through the commodity markets, becoming not only a "weather code" for quantitative funds and traders to frantically profit from, but also quietly driving up global food prices and the cost of living for ordinary people.
Trade Spot Market Orders With More Control: WEEX Adds Slippage Tolerance
WEEX Spot now supports Slippage tolerance for market orders, helping users set a maximum acceptable price deviation before placing a market buy or sell order
Customer Support:@weikecs
Business Cooperation:@weikecs
Quant Trading & MM:bd@weex.com
VIP Program:support@weex.com





