The FBI has issued a new warning about North Korea’s use of “highly tailored, difficult-to-detect social engineering campaigns” targeting companies in decentralized finance (DeFi) and cryptocurrency. Despite the advanced technical expertise of these companies, North Korean cyber actors employ sophisticated strategies to gather employee information and build rapport to deploy malware and steal company cryptocurrency.
These schemes often involve scouting prospective victims via social media, particularly on professional networking platforms. The FBI highlights cryptocurrency exchange-traded funds (ETFs) and similar products as primary targets. The bureau also warns of tactics such as using non-standard software for basic tasks, malicious code in software repositories, and attempts to place fake IT workers in targeted companies.
The FBI emphasizes that North Korea remains a persistent threat, using various methods like ransomware, malware, and social engineering to exploit cryptocurrency-related organizations for financial gain. The alert serves as a reminder to companies with access to cryptocurrency assets to remain vigilant against these elaborate scams.
