{"id":20176,"date":"2025-04-02T10:18:05","date_gmt":"2025-04-02T10:18:05","guid":{"rendered":"https:\/\/dogewisperer.com\/?p=20176"},"modified":"2025-04-02T10:18:05","modified_gmt":"2025-04-02T10:18:05","slug":"north-korea-linked-fraudsters-target-uk-crypto-firms-google-warns","status":"publish","type":"post","link":"https:\/\/dogewisperer.com\/?p=20176","title":{"rendered":"North Korea-Linked Fraudsters Target UK Crypto Firms, Google Warns"},"content":{"rendered":"<div>\n<p><span data-preserver-spaces=\"true\">North Korea-linked tech operatives are broadening their infiltration of global blockchain companies, with a noticeable shift toward targeting firms in the United Kingdom and Europe, according to Google\u2019s Threat Intelligence Group (GTIG). <\/span><\/p>\n<p><span data-preserver-spaces=\"true\">The move follows heightened scrutiny from U.S. authorities, which has pushed many of these actors to seek employment beyond American borders.<\/span><\/p>\n<p><strong><span data-preserver-spaces=\"true\">DISCOVER:\u00a0<\/span><a class=\"general-link\" href=\"https:\/\/99bitcoins.com\/cryptocurrency\/best-meme-coin-icos\/\" target=\"_blank\" rel=\"noopener\"><span data-preserver-spaces=\"true\">Best Meme Coin ICOs to Invest in March 2025<\/span><\/a><\/strong><\/p>\n<h2><span data-preserver-spaces=\"true\">North Korea-Linked IT Fraudsters Build Global Network of Fake Identities, Says Google<\/span><\/h2>\n<p><span data-preserver-spaces=\"true\">In a <\/span><a class=\"general-link\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/dprk-it-workers-expanding-scope-scale\" target=\"_blank\" rel=\"nofollow noopener nofollow\"><span data-preserver-spaces=\"true\">report released on April 2<\/span><\/a><span data-preserver-spaces=\"true\">, GTIG adviser Jamie Collier said that fraudulent IT workers tied to North Korea are adapting to increased awareness in the U.S. by building a global network of fake identities. <\/span><\/p>\n<p><span data-preserver-spaces=\"true\">\u201cIn response to heightened awareness of the threat within the United States, they\u2019ve established a global ecosystem of fraudulent personas to enhance operational agility,\u201d Collier noted.<\/span><\/p>\n<p><span data-preserver-spaces=\"true\">Collier emphasized that the presence of enablers within the UK suggests <\/span><span data-preserver-spaces=\"true\">the formation of<\/span><span data-preserver-spaces=\"true\"> a broader support network, enabling these operatives to persist in their schemes. <\/span><\/p>\n<p><span data-preserver-spaces=\"true\">These workers have managed to infiltrate a wide range of projects, from traditional web development to advanced blockchain applications, including work on Solana and Anchor smart contracts.<\/span><\/p>\n<p><span data-preserver-spaces=\"true\">One case involved North Korean developers working on a blockchain-based job marketplace and an AI-powered web application using blockchain technologies. <\/span><\/p>\n<p><span data-preserver-spaces=\"true\">These individuals often pose as legitimate remote employees, enabling them to gain access to company systems and funnel revenue back to the North Korean regime.<\/span><\/p>\n<p><span data-preserver-spaces=\"true\">\u201cThis places organizations that hire DPRK IT workers at risk of espionage, data theft, and disruption,\u201d Collier warned.<\/span><\/p>\n<p><span data-preserver-spaces=\"true\">Beyond the UK, GTIG has identified an expanded focus on Europe. Investigators uncovered at least one North Korean worker using 12 <\/span><span data-preserver-spaces=\"true\">different<\/span><span data-preserver-spaces=\"true\"> identities across European countries. <\/span><\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Having audio issues on your Zoom call? That&#8217;s not a VC, it&#8217;s North Korean hackers. <\/p>\n<p>Fortunately, this founder realized what was going on.<\/p>\n<p>The call starts with a few &#8220;VCs&#8221; on the call. They send messages in the chat saying they can&#8217;t hear your audio, or suggesting there&#8217;s an\u2026 <a href=\"https:\/\/t.co\/ZnW8Mtof4F\" target=\"_blank\" rel=\"nofollow\">pic.twitter.com\/ZnW8Mtof4F<\/a><\/p>\n<p>\u2014 Nick Bax.eth (@bax1337) <a href=\"https:\/\/twitter.com\/bax1337\/status\/1899471318178771129?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"nofollow\">March 11, 2025<\/a><\/p>\n<\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p><span data-preserver-spaces=\"true\">Several others submitted resumes referencing degrees from Belgrade University and residences in Slovakia. Additional findings included attempts to gain work in Germany and Portugal, stolen credentials for job platforms, and a broker offering fake passports.<\/span><\/p>\n<p><strong><span data-preserver-spaces=\"true\">EXPLORE:\u00a0<\/span><a class=\"general-link\" href=\"https:\/\/99bitcoins.com\/cryptocurrency\/best-ai-crypto-coins\/\" target=\"_blank\" rel=\"noopener\"><span data-preserver-spaces=\"true\">10 Best AI Crypto Coins to Invest in 2025<\/span><\/a><\/strong><\/p>\n<h2><span data-preserver-spaces=\"true\">Report Reveals Surge in Extortion Threats by Dismissed Workers Since October<\/span><\/h2>\n<p><span data-preserver-spaces=\"true\">The report also highlights a surge in extortion attempts since October. In several cases, recently dismissed workers threatened to leak sensitive data or sell it to competitors. Targeted data included proprietary source code and internal project files.<\/span><\/p>\n<p><span data-preserver-spaces=\"true\">In the U.S., the crackdown on such activities has intensified. In January, the Justice Department indicted two North Korean nationals for orchestrating a fraudulent IT employment scheme involving over 60 companies. <\/span><\/p>\n<p><span data-preserver-spaces=\"true\">Simultaneously, the U.S. Treasury sanctioned entities accused of operating as front companies for North Korean IT activities.<\/span><\/p>\n<p><span data-preserver-spaces=\"true\">Meanwhile, crypto project founders continue to raise the alarm. On March 13, at least three reported foiling North Korean phishing attempts disguised as fake Zoom interviews. <\/span><\/p>\n<p><span data-preserver-spaces=\"true\">In August, blockchain investigator ZachXBT revealed that North Korean developers <\/span><span data-preserver-spaces=\"true\">were earning<\/span><span data-preserver-spaces=\"true\"> up to $500,000 monthly while embedded in legitimate crypto firms.<\/span><\/p>\n<p><strong><span data-preserver-spaces=\"true\">EXPLORE:\u00a0<\/span><a class=\"general-link\" href=\"https:\/\/99bitcoins.com\/analysis\/crypto-forecast-best-crypto\/\" target=\"_blank\" rel=\"noopener\"><span data-preserver-spaces=\"true\">10 Coins with High Returns: Crypto Forecast 2025<\/span><\/a><\/strong><\/p>\n<div class=\"nnbtc-key-takeaways\">\n<h3 class=\"nnbtc-key-takeaways__title\">Key Takeaways<\/h3>\n<ul class=\"nnbtc-key-takeaways__list\">\n<li class=\"nnbtc-key-takeaways__list-item\">\n        <span data-preserver-spaces=\"true\">North Korea-linked IT operatives are expanding their focus to blockchain firms in the UK and Europe according to Google\u2019s Threat Intelligence Group (GTIG).<\/span>    <\/li>\n<li class=\"nnbtc-key-takeaways__list-item\">\n        <span data-preserver-spaces=\"true\">These workers use fake identities to infiltrate companies and redirect funds to the North Korean regime.<\/span>    <\/li>\n<li class=\"nnbtc-key-takeaways__list-item\">\n        <span data-preserver-spaces=\"true\">Google reports <\/span><span data-preserver-spaces=\"true\">a rise in<\/span><span data-preserver-spaces=\"true\"> extortion threats from dismissed workers, putting sensitive data at risk.<\/span>    <\/li>\n<\/ul><\/div>\n<p>The post <a href=\"https:\/\/99bitcoins.com\/news\/north-korea-linked-fraudsters-target-uk-crypto-firms-google-warns\/\">North Korea-Linked Fraudsters Target UK Crypto Firms, Google Warns<\/a> appeared first on <a href=\"https:\/\/99bitcoins.com\/\">99Bitcoins<\/a>.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>North Korea-linked tech operatives are broadening their infiltration of global blockchain companies, with a noticeable shift toward targeting firms in the United Kingdom and Europe, according to Google\u2019s Threat Intelligence Group (GTIG). The move follows heightened scrutiny from U.S. authorities, which has pushed many of these actors to seek employment beyond American borders. DISCOVER:\u00a0Best Meme [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":0,"footnotes":""},"categories":[2],"tags":[3,4,5],"class_list":["post-20176","post","type-post","status-publish","format-standard","hentry","category-news","tag-crypto","tag-doge","tag-news"],"_links":{"self":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/20176","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=20176"}],"version-history":[{"count":0,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/20176\/revisions"}],"wp:attachment":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=20176"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=20176"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=20176"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}