Odaily News Google Threat Intelligence Group (GTIG) released a report saying that North Korean hackers are posing as remote technicians and are expanding their infiltration operations to non-US blockchain projects such as the UK. Due to tightened US regulations, they have established a global network of false identities to continue to obtain funds and expand the scope of their activities.
These fake people participated in multiple Web3 projects including Solana and Anchor smart contract development, as well as projects such as building a blockchain talent market and AI blockchain applications. Collier pointed out that these people impersonated legitimate employees to obtain salaries, and after being fired, they extorted by leaking source code and other means.
Previously, the U.S. Department of Justice had indicted two North Korean nationals for a remote work fraud scheme between 2018 and 2024 that affected at least 64 U.S. companies. (Cointelegraph)