North Korean Hackers Pose as LinkedIn Recruiters to Steal $308 Million in Cryptocurrency

In 2024, North Korean hackers employed a deceptive scheme by impersonating LinkedIn recruiters to infiltrate cryptocurrency firms, resulting in the theft of $308 million. They targeted employees with enticing job offers, sending malicious links or attachments that, once engaged, installed malware on the victims’ devices. This malware provided the hackers with unauthorized access to internal systems, enabling them to divert substantial funds into accounts controlled by the North Korean regime. This method signifies a shift from traditional hacking to sophisticated social engineering tactics, exploiting professional networking platforms to breach organizational defences. The stolen funds are believed to support North Korea’s nuclear and ballistic missile programs, circumventing international sanctions. This incident underscores the critical need for heightened cybersecurity awareness and robust protocols within the cryptocurrency industry to counteract evolving threats posed by state-sponsored actors.