North Korea's notorious hacking group, Lazarus, is reportedly infiltrating LinkedIn to target professionals in the digital asset industry. SlowMist, a blockchain security firm, made this claim on April 24, pointing out a surge in cryptocurrency-related hacking attempts.
According to SlowMist's X account, the Lazarus Group is using LinkedIn to connect with cryptocurrency industry personnel, ultimately aiming to steal assets or privileges by distributing malware.
The security company alleges that Lazarus Group members are creating fake profiles on LinkedIn and reaching out to human resources and hiring managers in various blockchain-related organizations. They then send links containing code, which supposedly showcases their coding skills. However, this code actually contains dangerous malware designed to exploit personal data.
SlowMist further explained that the malware, among other functions, attempts to steal as much data as possible from the victim's device and uploads it to a server controlled by the attacker.
In a report released last month, a U.N. panel of experts estimated that around 40% of North Korea's weapons of mass destruction (WMD) funding comes from illicit cyber activities.
The Lazarus Group, notorious for its cyber attacks, has reportedly stolen over $3 billion worth of digital assets worldwide. A recent report by blockchain intelligence firm TRM Labs suggests that North Korea stole more than $600 million in digital assets in 2023 alone.
Security officials from the U.S. and its allies are concerned that North Korea's state-sponsored malware initiatives could pose significant threats to national security.
In December, the U.S. sanctioned a crypto mixer called Sinbad, which was labeled a "key money-laundering tool" for North Korea's exploitation of digital assets.
Deputy Secretary of the Treasury, Wally Adeyemo, emphasized the government's commitment to preventing illicit activities in the digital asset ecosystem. However, it remains uncertain whether the Lazarus Group will face political repercussions for its latest crypto malware scheme.
