DOJ Charge Fake North Korean Devs 'Embedding' In Crypto Startups
Four North Korean nationals infiltrated an Atlanta-based blockchain startup, stealing nearly $1 million in cryptocurrency by posing as remote developers. They operated initially in the UAE before targeting U.S. and Serbian firms, stealing $175,000 and $740,000 in separate incidents in 2022. The stolen funds were laundered through mixers and exchanges using fake IDs. The group, described as "North Korean IT workers," embedded themselves within organizations to gather intelligence and facilitate breaches. Their tactics highlight vulnerabilities in the crypto sector's remote hiring practices, where background checks are often overlooked. Recent federal actions included raids across 16 states, seizing financial accounts, fraudulent websites, and computers linked to North Korean IT schemes. These operations demonstrate a long-term strategy by North Korea to exploit the crypto industry.