North Korea’s Evolving Crypto Hiring Scams Target Tech Firms

North Korean IT operatives are refining their tactics to infiltrate cryptocurrency firms, according to multiple sources interviewed by Decrypt. Recent attempts involve hiring foreign intermediaries to clear initial interview rounds before revealing their true origins during technical assessments. UK startup Cheqd reported five such incidents within a year, including one candidate whose European facade dissolved into telltale Korean interface usage during a coding test.

The regime's cybercrime operations stole $1.34 billion in digital assets last year, with crypto companies remaining prime targets. This new approach suggests strategic adaptation—leveraging plausible Western profiles early in recruitment processes before technical evaluations expose inconsistencies in language, connectivity, or software environments.