North Korean crypto thieves use fake resumes and identities to impersonate experts, bloomberg News reported on August 1st.
According to Bloomberg, according to interviews with cybersecurity experts, these scammers are actively stealing information from legitimate profiles and applying for jobs on Indeed and LinkedIn.
North Korean Thieves Target Crypto Jobs
Cybersecurity firm Mandiant reported that a suspected North Korean job seeker claimed to be an “innovative and strategic thinking expert,” adding that “the world will see great results from my hands.” will do,’ he added.
Although the applicant claimed to be an experienced software developer, researchers at the company found words in someone else’s profile that were strikingly similar.
In addition to plagiarizing resumes, researchers also found that some of the North Korean suspects falsified their credentials when applying for jobs.
These include lying about publishing the whitepaper of the Bibox crypto exchange and impersonating a senior software developer. The researchers added that several employers hired these suspected North Koreans as freelancers.
Why Crypto Jobs?
Joe Dobson, principal analyst at Mandiant, said the new scheme could be a way to gather information before cryptocurrency trends occur. Mr Dobson said:
It comes down to insider threat. If someone is hired by a crypto project and becomes a core developer, they can influence things for good or not.
Additionally, researchers noted that some of these activities may be state-sponsored to give the North Korean government an edge in laundering illicit funds from cryptocurrency.
North Korean officials have consistently denied sponsoring cryptocrime, but available public information indicates otherwise.
US has warned of this threat before
A new report supports earlier US government warnings that North Korean IT workers were trying to get freelance jobs abroad by posing as citizens of other countries.
A 16-page recommendation published two months ago claimed that IT workers were focused on “freelance contracts from employers in wealthier countries.”
Google warns against fake job sites
Meanwhile, Google also said suspected North Korean hackers may have cloned several popular job sites, such as Indeed.com and ZipRecruiter, to gather information from visitors and steal data. reported that there is
In such cases, they collect information from job applicants and send malicious software to access the data.