The FBI has warned that North Korean hacker groups are targeting crypto companies and their employees, using sophisticated social engineering attacks to develop malware designed to steal cryptocurrencies.
See also: 2023: Large number of breaches through social engineering attacks
According to the FBI, their social engineering tactics are highly targeted and difficult to detect, even for those with advanced cybersecurity expertise.
In recent months, North Korean hackers have been observed conducting extensive research on potential targets, focusing on individuals associated with crypto exchange-traded funds (ETFs) and other related financial products. This level of pre-operational staging suggests that they are preparing for potential social engineering attacks on companies associated with crypto ETFs and similar assets.
The law enforcement agency also warned that organizations dealing with significant amounts of cryptocurrencies are also at risk of being targeted by North Korean hacker aiming to breach networks and steal funds.
Among the social engineering tactics used by these state-sponsored groups, the FBI highlights their meticulously designed attacks, which begin by identifying specific DeFi and crypto businesses to target. In the next stage of the attack, they target their employees with social engineering attacks that often include offers of new jobs or investment opportunities, leveraging detailed personal information to enhance credibility and appeal.
See also: Social engineering campaign bombards businesses with spam emails
Attackers are well-versed in the technical aspects of the cryptocurrency industry and have also been observed using stolen images and professionally constructed websites to make their schemes appear legitimate at first glance.
The FBI also provided a list of potential indicators of North Korean social engineering activity and best practices that companies in the crypto industry and their employees should follow to reduce the risk of breach from such attacks.
Since the beginning of the year, the FBI has also warned about scammers posing as cryptocurrency exchange employees to target unsuspecting victims and cybercriminals posing as law firms offering cryptocurrency recovery services.
He also warned about fake job ads used to steal cryptocurrencies and against the use of unlicensed cryptocurrency transfer services, which could lead to financial loss if law enforcement authorities take down these platforms.
See also: 4 ways hackers bypass MFA through social engineering
Social engineering, such as attacks on crypto companies, is a manipulation technique that exploits human psychology to gain confidential information, access, or valuable resources. Unlike traditional hacking that focus on technical vulnerabilities, social engineering attacks often rely on social interactions, where attackers trick individuals into revealing sensitive information or performing actions that compromise security. This can take many forms, from phishing emails disguised as legitimate requests to impersonating trusted contacts in phone calls. Awareness and education about social engineering tactics are essential to protect against these increasingly sophisticated threats.
Source: bleepingcomputer
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
