North Korean Operative Infiltrates Kraken in Elaborate Crypto Job Scam

Another day, another crypto security breach—this time with a geopolitical twist. Kraken, the exchange that somehow still hasn’t learned to vet employees like they vet withdrawal requests, just got played by a DPRK-linked actor.

How? The old-fashioned way: A fake job offer scam. Because nothing says ’decentralized future’ like handing over corporate access to hostile nation-states. At least the hackers didn’t rug-pull the HR department.

Pro tip for exchanges: Maybe spend less on Super Bowl ads and more on background checks. Just a thought.

Kraken’s report emphasized that cybersecurity threats now reach far beyond traditional attack surfaces. In an era of AI-generated personas and social engineering, even the HR inbox has become a potential vector for compromise.

The individual in question, Kraken later confirmed, was tied to broader North Korean operations estimated to have drained over $650 million from crypto platforms in 2024 alone.

The company concluded with a stark reminder: not all attacks come through code. Sometimes, they start with a résumé.