Crypto Exchange Job Applicant, Allegedly North Korean Hacker 'Steven Smith', Arrested by Kraken: Statement
When one of the world's top crypto exchange platforms received an application for an IT job, they didn't expect it to be from a North Korean hacker posing as "Steven Smith." In a report by CBS News, Kraken's Chief Security Officer Nick Percoco revealed this shocking discovery.
Percoco explained that this individual aimed to steal money and information from Kraken. Despite being on a "Do Not Hire" list, the hacker's tactics were intriguing, leading Percoco to want to engage with him. During an interview with Kraken, the man was asked to show his identification, claiming to be from Houston. After some hesitation, he presented a screenshot of a driver's license with a different name and address.
The man, according to Fortune's report, claimed to have a bachelor's degree in computer science from New York University and over a decade of experience at US firms such as Cisco and Kindly Human. The United Nations estimates North Korea makes between $250 million and $600 million annually by deceiving foreign firms into hiring its spies.
Kraken's security team intelligently prolonged the hiring process to gather intelligence about the hacker's methods and intentions. They detected several red flags: name mismatch, suspicious email and identity, inconsistent responses, and technical indicators. By conducting Open-Source Intelligence (OSINT) scans, they uncovered ties between the applicant’s credentials and previous breaches, as well as links to identity theft.
North Korea's organized campaign to infiltrate crypto and tech firms is nothing new. Operatives pose as job candidates with fake identities, forged credentials, and stolen personal information to secure insider access. To defend against such threats, Kraken and other firms can share threat intelligence, conduct OSINT, and take a proactive, well-informed approach to security. By staying vigilant and replicating Kraken's strategies, the crypto industry can better protect itself from these advanced attacks.
Latest News and Announcements
- The World’s First International Crypto Trading Cup Kicks Off Live
- New Purpose-Built Blockchain T-Rex Raises $17 Million To Transform Attention Layer in Web 3.0
- Flipster Makes Esports Debut As Official Crypto Exchange Partner of TALON's Dota Two Team, Powering a New Era of Fan Engagement
- Bybit Bounces Back - Kaiko Validates Fast Liquidity Recovery Post $1.5 Billion Hack
- ProMeet Unveils the Promeeters Program To Boost Influencer Impact and Long-Term Earnings
- DogeOS Raises $6.9 Million in Funding Round Led by Polychain Capital To Launch Dogecoin App Layer
- Casper 2.0 Goes Live on Mainnet, Positioning Casper Network for the Real-World Asset Era
If you found this article helpful, follow us on [X], Facebook, and Telegram and stay updated. Don't Miss a Beat - Subscribe to get email alerts delivered directly to your inbox.
- Kraken's recent discovery of a North Korean hacker aiming to infiltrate the platform serves as a reminder of the importance of vigilance in the cryptocurrency industry, especially in regard to cybersecurity and technology.
- The hacker, posing as "Steven Smith," was caught during the hiring process for an IT job, demonstrating the need for a proactive, well-informed approach to security in the crypto trading industry.
- To defend against similar threats, industry players can share threat intelligence, conduct Open-Source Intelligence (OSINT), and take a proactive approach to security, as Kraken did by prolonging the hiring process to gather intelligence.
- The crypto industry can learn from Kraken's strategies and strive to protect itself from advanced attacks, as hackers are known to pose as job candidates with fake identities, forged credentials, and stolen personal information to secure insider access.
- While the crypto trading industry continues to evolve with the launch of events like the International Crypto Trading Cup, it's crucial to remember the importance of cybersecurity and healthy practices to avoid potential vulnerabilities and the financial and informational losses that can come with them.
- As the crypto and blockchain industry expands, it's essential to remember that the financial and technological landscape remains susceptible to cyber threats, making vigilance and strategic measures like OSINT scans, threat intelligence sharing, and proactive security practices indispensable.
