Crypto Exchange Kraken Uncovers North Korean Espionage Plot
By: bitcoinist|2025/05/03 04:15:01
0
Share
Crypto exchange Kraken’s latest security disclosure reads less like a corporate blog post than a field report from the front lines of modern cyber-warfare. Published on 1 May 2025 under the blunt title “How we identified a North Korean hacker who tried to get a job at Kraken,” the account describes in granular detail how a seemingly routine hiring process morphed into what the exchange openly calls “an intelligence gathering operation.” From the first contact, something felt wrong. Recruiters noticed that the applicant “joined under a different name from the one on their resume, and quickly changed it,” a detail the security team later described as the opening note in a symphony of red flags. Moments later, the interview took on an uncanny timbre: “the candidate occasionally switched between voices, indicating that they were being coached through the interview in real time.” Kraken Tricks North Korean Crypto Hacker Kraken’s staff did not rely on intuition alone. The post explains that industry partners had already circulated “a list of email addresses linked to the hacker group,” and one of those addresses matched the résumé in question. Armed with that match, Kraken’s Red Team launched an OSINT dive that exposed what it calls “a larger network of fake identities and aliases” spreading across the crypto employment market. According to the blog, multiple companies had unwittingly hired personas from the same lattice of fabricated résumés, and “one identity in this network was also a known foreign agent on the sanctions list.” Technical inconsistencies began piling up. The exchange recounts how the applicant relied on “remote colocated Mac desktops but interacted with other components through a VPN,” a configuration favoured by operators who need to launder location data. Investigators tied the résumé to a GitHub profile containing an email address that “had been exposed in a past data breach,” and finally concluded that the primary government ID “appeared to be altered, likely using details stolen in an identity theft case two years prior.” With the evidence mounting, Kraken opted for misdirection rather than immediate rejection. The company advanced the applicant through successive stages—in effect baiting the hook. “Instead of tipping off the applicant, our security and recruitment teams strategically advanced them through our rigorous recruitment process – not to hire, but to study their approach,” the blog states. The denouement came in what should have been an informal “chemistry interview” with Chief Security Officer Nick Percoco. The applicant did not realise that every pleasantry was laced with a test. Percoco and his colleagues asked for live two-factor confirmations: show your government ID on camera, report your physical location, name a few local restaurants. “At this point,” the post recounts, “the candidate unraveled. Flustered and caught off guard, they struggled with the basic verification tests, and couldn’t convincingly answer real-time questions about their city of residence or country of citizenship.” Percoco subsequently distilled the lesson from the disclosure: “Don’t trust, verify. This core crypto principle is more relevant than ever in the digital age. State-sponsored attacks aren’t just a crypto, or US corporate, issue – they’re a global threat. Any individual or business handling value is a target, and resilience starts with operationally preparing to withstand these types of attacks .” The blog underscores that the crypto sector’s attack surface is no longer confined to code repositories or hot-wallet infrastructure; it extends to the HR inbox. “Not all attackers break in, some try to walk through the front door,” Kraken writes, adding that “Generative AI is making deception easier, but isn’t foolproof... genuine candidates will usually pass real-time, unprompted verification tests.” In a concluding reflection on organisational culture, the post argues that “a culture of productive paranoia is key. Security isn’t just an IT responsibility. In the modern era, it’s an organizational mindset.” Kraken closes its narrative with a reminder that the candidate was part of the North Korean campaign which, by third-party estimates cited in the post, siphoned more than $650 million from crypto firms in 2024. The message is sober and unsentimental: “Sometimes, the biggest threats come disguised as opportunities.” At press time, BTC traded at $96,825. Featured image created with DALL.E, chart from TradingView.com
You may also like
The ten years of Cloud on the Air: From corner coffee to global financial infrastructure
How did a remittance company grow into a financial infrastructure that can replace SWIFT; when it really reaches this scale, how should stablecoins be positioned for it; and what can AI integrate into this infrastructure?
From ByteDance to Financial Freedom: How did "Byte Brother" Leto develop his investment judgment skills to achieve a turnaround of 30 million?
Speak with data and signals, validate judgments with A/B tests, and seek asymmetric returns with limited risk exposure.
OUSD False Cooperation Controversy? The Credit Game of Stablecoins and Endorsements by Giants
The success of stablecoins does not rely on rallying a group of alliance members for marketing, but rather on whether they have real use cases and genuine users.
Trump, the best stock trader among U.S. presidents
Trump has almost turned the presidency into a business and maximized the conversion of presidential influence into commercial profits.
Q-Day Countdown: Will Quantum Computing End Cryptocurrency?
In the face of dormant coins being plundered by quantum computing power, should we firmly uphold the unalterable bottom line of "code is law," or should we enforce a soft fork to freeze legacy assets?
Selling coins despite a loss of 55 million dollars, the faith in Strategy has reached the interest payment date
The moment faith was securitized, Bitcoin became a bill.
The cryptocurrency industry has become a traditional industry
For entrepreneurs and retail investors still in this industry, they should either embrace the current changes or explore the next unpredictable field in cryptocurrency.
Chip frenzy cooling down? Morgan Stanley's Wilson: Funds are shifting towards AI supercomputing giants like Microsoft and Amazon
Morgan Stanley's chief equity strategist Wilson pointed out that the momentum in the semiconductor sector is waning, with the Philadelphia Semiconductor Index having dropped nearly 14% from its peak. Funds are shifting towards AI supercomputing giants like Microsoft, Amazon, and Meta, as well as sec...
$10,000 in TRUMP Token vs. $10,000 in Nasdaq: The "Trump Trade" That Actually Worked in 2026
TRUMP Token lost more than 96% after its launch, while Nasdaq stocks and NVIDIA delivered strong gains. Compare what happened to a $10,000 investment and explore why asset fundamentals matter more than market hype.
Morning Report | Vitalik outlines Ethereum's long-term roadmap, Lean Ethereum will become the third major iteration; SK Hynix seeks to attract more AI investors by listing in the U.S
July 5 Market Important Events Overview
The impact of OUSD on Circle, Tether, and Paxos: not a single negative factor, but a more complex reshaping of competition
OUSD will not be the last new competitor; Circle needs to respond more actively in terms of products, distribution, and ecosystem collaboration.
Li Feifei's latest long article: When video generation, robots, and NVIDIA all claim to be world models, we need a taxonomy
Language gives machines a way to talk about the world. The world model is the means by which machines ultimately understand, imagine, reason, and interact with it.
Blaming the desolation of the cryptocurrency world on the rise of AI is a form of intellectual laziness
The emergence of giants signifies a mature business model. Although it will reduce speculative space, there is also enough room for error, allowing for the continuous emergence of new forces.
Strategy Founder: The Next 10 Years of Bitcoin
In the next decade, the biggest evolution of Bitcoin is precisely "responding to change with invariance." The four-year cycle is giving way to capital flows such as ETFs, corporate and sovereign reserves, and bank credit, while digital credit and digital currency will grow layer upon layer on top of...
Forbes Special Report: Stablecoin cross-border payments are faster now, but not cheaper yet
Cross-border payments using stablecoins are rapidly expanding, bringing speed and accessibility, but due to insufficient institutional liquidity, they have not yet delivered on their promised cost savings. The technology has been validated, and regulations are improving, but the industry has not yet...
A valuation of 8 billion dollars, doubling in 8 months! What makes the crypto-friendly bank Erebor Bank stand out?
Erebor is a high-profile experiment taking place at the intersection of banking, cryptocurrency, and industrial policy.
340 billion valuation: Li Yanhong's largest IPO, a seat in Kunlunxin's shares is hard to come by
As a core asset in Baidu's AI landscape, Kunlun Chip is expected to exceed Baidu's market value after going public, becoming an important bargaining chip in its turnaround battle.
Stablecoins are the "royalists" of the crypto world: Open USD brings the old currency system into play
The emergence of Open USD has shifted the competition for stablecoins from the market struggle of crypto startups to a battle for infrastructure involving traditional finance, payment networks, technology platforms, and public chain ecosystems.
The ten years of Cloud on the Air: From corner coffee to global financial infrastructure
How did a remittance company grow into a financial infrastructure that can replace SWIFT; when it really reaches this scale, how should stablecoins be positioned for it; and what can AI integrate into this infrastructure?
From ByteDance to Financial Freedom: How did "Byte Brother" Leto develop his investment judgment skills to achieve a turnaround of 30 million?
Speak with data and signals, validate judgments with A/B tests, and seek asymmetric returns with limited risk exposure.
OUSD False Cooperation Controversy? The Credit Game of Stablecoins and Endorsements by Giants
The success of stablecoins does not rely on rallying a group of alliance members for marketing, but rather on whether they have real use cases and genuine users.
Trump, the best stock trader among U.S. presidents
Trump has almost turned the presidency into a business and maximized the conversion of presidential influence into commercial profits.
Q-Day Countdown: Will Quantum Computing End Cryptocurrency?
In the face of dormant coins being plundered by quantum computing power, should we firmly uphold the unalterable bottom line of "code is law," or should we enforce a soft fork to freeze legacy assets?
Selling coins despite a loss of 55 million dollars, the faith in Strategy has reached the interest payment date
The moment faith was securitized, Bitcoin became a bill.
Customer Support:@weikecs
Business Cooperation:@weikecs
Quant Trading & MM:bd@weex.com
VIP Program:support@weex.com





