A team of North Korean IT operatives linked to a $680,000 crypto hack have been utilizing Google products and renting computers to infiltrate crypto projects. Recently leaked screenshots reveal a small group of six workers who share at least 31 fake identities, acquiring government IDs and online accounts to mask their identities and secure jobs. One worker even interviewed for a position at Polygon Labs, claiming experience at platforms like OpenSea and Chainlink. These operatives often use remote access software and VPNs to conceal their true location and employed Payoneer for converting fiat into crypto. Documents indicate their operations are not highly sophisticated but emphasized that crypto firms need to enhance due diligence in hiring to avoid similar infiltrations. The U.S. Treasury has begun sanctioning those involved in these operations, urging companies to collaborate more closely with freelance platforms to address this growing issue in the crypto job market.

Source 🔗