Binance Exposes North Korean Crypto Infiltration Campaign

Key Points

1. North Korean hackers are using fake crypto consulting firms and bogus job interviews to infiltrate companies, deploying malware like JavaScript stealers and Python backdoors.

2. In February 2025, North Korean hackers breached Dubai-based exchange Bybit, stealing approximately $1.5 billion in Ethereum, accounting for nearly 69% of all stolen funds this year.

3. Over $2.17 billion has been stolen from the crypto world in the first half of 2025, surpassing all losses from 2024 and setting a new six-month record.

4. North Korean hackers also exploit supply chain vulnerabilities, such as NPM (Node Package Manager), and use AI-made deepfakes and voice-changing tools in job recruitment scams.

5. Experts recommend stronger recruitment and vetting practices, including tight identity checks, to combat these threats, emphasizing the need for global collaboration among law enforcement, cybersecurity experts, and governments.