{"id":56227,"date":"2025-04-02T08:06:52","date_gmt":"2025-04-02T08:06:52","guid":{"rendered":"https:\/\/mycryptomania.com\/?p=56227"},"modified":"2025-04-02T08:06:52","modified_gmt":"2025-04-02T08:06:52","slug":"north-korea-linked-fraudsters-target-uk-crypto-firms-google-warns","status":"publish","type":"post","link":"https:\/\/mycryptomania.com\/?p=56227","title":{"rendered":"North Korea-Linked Fraudsters Target UK Crypto Firms, Google Warns"},"content":{"rendered":"

North Korea-linked tech operatives are broadening their infiltration of global blockchain companies, with a noticeable shift toward targeting firms in the United Kingdom and Europe, according to Google\u2019s Threat Intelligence Group (GTIG). <\/span><\/p>\n

The move follows heightened scrutiny from U.S. authorities, which has pushed many of these actors to seek employment beyond American borders.<\/span><\/p>\n

DISCOVER:\u00a0<\/span>Best Meme Coin ICOs to Invest in March 2025<\/span><\/a><\/strong><\/p>\n

North Korea-Linked IT Fraudsters Build Global Network of Fake Identities, Says Google<\/span><\/h2>\n

In a <\/span>report released on April 2<\/span><\/a>, GTIG adviser Jamie Collier said that fraudulent IT workers tied to North Korea are adapting to increased awareness in the U.S. by building a global network of fake identities. <\/span><\/p>\n

\u201cIn response to heightened awareness of the threat within the United States, they\u2019ve established a global ecosystem of fraudulent personas to enhance operational agility,\u201d Collier noted.<\/span><\/p>\n

Collier emphasized that the presence of enablers within the UK suggests <\/span>the formation of<\/span> a broader support network, enabling these operatives to persist in their schemes. <\/span><\/p>\n

These workers have managed to infiltrate a wide range of projects, from traditional web development to advanced blockchain applications, including work on Solana and Anchor smart contracts.<\/span><\/p>\n

One case involved North Korean developers working on a blockchain-based job marketplace and an AI-powered web application using blockchain technologies. <\/span><\/p>\n

These individuals often pose as legitimate remote employees, enabling them to gain access to company systems and funnel revenue back to the North Korean regime.<\/span><\/p>\n

\u201cThis places organizations that hire DPRK IT workers at risk of espionage, data theft, and disruption,\u201d Collier warned.<\/span><\/p>\n

Beyond the UK, GTIG has identified an expanded focus on Europe. Investigators uncovered at least one North Korean worker using 12 <\/span>different<\/span> identities across European countries. <\/span><\/p>\n

Having audio issues on your Zoom call? That’s not a VC, it’s North Korean hackers. <\/p>\n

Fortunately, this founder realized what was going on.<\/p>\n

The call starts with a few “VCs” on the call. They send messages in the chat saying they can’t hear your audio, or suggesting there’s an\u2026 pic.twitter.com\/ZnW8Mtof4F<\/a><\/p>\n

\u2014 Nick Bax.eth (@bax1337) March 11, 2025<\/a><\/p>\n\n

Several others submitted resumes referencing degrees from Belgrade University and residences in Slovakia. Additional findings included attempts to gain work in Germany and Portugal, stolen credentials for job platforms, and a broker offering fake passports.<\/span><\/p>\n

EXPLORE:\u00a0<\/span>10 Best AI Crypto Coins to Invest in 2025<\/span><\/a><\/strong><\/p>\n

Report Reveals Surge in Extortion Threats by Dismissed Workers Since October<\/span><\/h2>\n

The report also highlights a surge in extortion attempts since October. In several cases, recently dismissed workers threatened to leak sensitive data or sell it to competitors. Targeted data included proprietary source code and internal project files.<\/span><\/p>\n

In the U.S., the crackdown on such activities has intensified. In January, the Justice Department indicted two North Korean nationals for orchestrating a fraudulent IT employment scheme involving over 60 companies. <\/span><\/p>\n

Simultaneously, the U.S. Treasury sanctioned entities accused of operating as front companies for North Korean IT activities.<\/span><\/p>\n

Meanwhile, crypto project founders continue to raise the alarm. On March 13, at least three reported foiling North Korean phishing attempts disguised as fake Zoom interviews. <\/span><\/p>\n

In August, blockchain investigator ZachXBT revealed that North Korean developers <\/span>were earning<\/span> up to $500,000 monthly while embedded in legitimate crypto firms.<\/span><\/p>\n

EXPLORE:\u00a0<\/span>10 Coins with High Returns: Crypto Forecast 2025<\/span><\/a><\/strong><\/p>\n

\n

Key Takeaways<\/h3>\n

North Korea-linked IT operatives are expanding their focus to blockchain firms in the UK and Europe according to Google\u2019s Threat Intelligence Group (GTIG).<\/span> <\/p>\n

These workers use fake identities to infiltrate companies and redirect funds to the North Korean regime.<\/span> <\/p>\n

Google reports <\/span>a rise in<\/span> extortion threats from dismissed workers, putting sensitive data at risk.<\/span> <\/p><\/div>\n

The post North Korea-Linked Fraudsters Target UK Crypto Firms, Google Warns<\/a> appeared first on 99Bitcoins<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"

North Korea-linked tech operatives are broadening their infiltration of global blockchain companies, with a noticeable shift toward targeting firms in the United Kingdom and Europe, according to Google\u2019s Threat Intelligence Group (GTIG). The move follows heightened scrutiny from U.S. authorities, which has pushed many of these actors to seek employment beyond American borders. DISCOVER:\u00a0Best Meme […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-56227","post","type-post","status-publish","format-standard","hentry","category-discovery"],"_links":{"self":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts\/56227"}],"collection":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=56227"}],"version-history":[{"count":0,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts\/56227\/revisions"}],"wp:attachment":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=56227"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=56227"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=56227"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}