The Federal Bureau of Investigation (FBI) has issued a warning about North Korean cyber actors who are using deceptive tactics to steal cryptocurrency from users. In a notice released on September 3, the FBI highlighted the ongoing threat posed by North Korean scammers, specifically targeting employees at decentralized finance (DeFi) and {cryptocurrency} firms.
According to the FBI, these malicious actors employ a range of sophisticated social engineering techniques to deceive their victims. Their schemes include fake job offers and investment opportunities, as well as impersonating prominent figures associated with various technologies. The scammers often provide links to “pre-employment tests” or other downloads, which install malware on the victim’s device.
The FBI's notice underscores that these scammers engage in prolonged conversations with potential victims to establish a sense of trust and make their interactions seem more credible. This approach helps them deliver malware in a manner that appears natural and non-threatening.
Since 2017, North Korean hackers have reportedly stolen approximately $3 billion in cryptocurrency through such schemes. The Lazarus Group, a notorious hacking collective linked to North Korea, has been behind many of these high-profile attacks on crypto users.
The FBI has previously issued warnings about various crypto scams, including those involving impersonation of exchange employees and fake recovery services. For instance, in June, the agency alerted the public to scammers posing as law firm employees offering fraudulent crypto recovery services.
As the landscape of cyber threats continues to evolve, the FBI's latest warning serves as a reminder of the need for vigilance in the cryptocurrency sector. Both individuals and organizations must remain cautious about unsolicited offers and be wary of any request to download files or click on suspicious links.