DPRK scammers have been employing fake offers of employment and investment opportunities to trick crypto users into downloading malware.
The United States Federal Bureau of Investigation (FBI) has issued a warning to employees at digital asset firms regarding the latest attempt by the Democratic People’s Republic of Korea to steal crypto.
In a Sept. 3 notice, the FBI said North Korean malicious cyber actors were targeting workers at decentralized finance and cryptocurrency companies to steal funds through “complex and elaborate” social engineering campaigns. Specifically, the federal agency warned that the scammers had researched firms associated with cryptocurrency-tied exchange-traded funds, or ETFs.
The actors employed schemes, including fake offers of employment or investment opportunities and impersonating well-known individuals associated “with certain technologies” to trick users. The scammers may then provide a link to a “pre-employment test” or another download to install malware.
