Cyber Security News

North Korean Hacker Tries to Infiltrate Kraken Through Job Application

Leading cryptocurrency exchange Kraken has disclosed that it recently thwarted an infiltration attempt by a suspected North Korean hacker posing as a job applicant.

The attempted breach highlights the increasing sophistication of state-backed cyber operations targeting the digital assets sector.

According to Kraken’s security team, the incident unfolded when a highly convincing applicant submitted a resume and cover letter for a position within Kraken’s engineering department.

Routine vetting flagged inconsistencies, and a subsequent investigation, aided by advanced forensics tools and threat intelligence, linked the applicant to known North Korean cyber threat actors-most notably the Lazarus Group, infamous for large-scale cryptocurrency heists and cyber intrusions.

“State-sponsored groups are increasingly leveraging non-traditional tactics, such as leveraging the recruitment pipeline, to gain footholds in key technology companies,” a Kraken spokesperson told reporters.

“Our layered security model, which includes rigorous background checks and threat intelligence partnerships, allowed us to halt the attempt before any compromise occurred.”

Crypto Exchanges Under Siege

The digital assets industry has become a prime target for nation-state hackers seeking to circumvent international sanctions and acquire foreign currency.

North Korea, in particular, has been linked to a string of high-profile attacks on major exchanges, with billions of dollars’ worth of cryptocurrency reportedly stolen in recent years.

This latest attempt reflects a growing trend of using social engineering-manipulating individuals rather than systems-to bypass even the most robust technical defenses.

As cyber threats evolve, Kraken is doubling down on its security investments.

The exchange has recently introduced the new Kraken Pro interface, upgrading trading infrastructure and incorporating technology from its subsidiary, Cryptowatch, to provide users with institutional-grade security and reliability.

“Security is foundational to our mission. We’re not only investing in world-class infrastructure but also in people and processes to protect our users and platform,” the spokesperson said.

Kraken Pro now offers advanced margin and futures trading, staking options, and a customizable interface, ensuring both security and performance for its global clientele.

Cybersecurity experts have praised Kraken’s vigilance, noting the necessity for all digital finance companies to adapt to the changing threat landscape.

“This incident underscores that cyber attackers will take any route possible-including HR-to achieve their aim,” said cybersecurity analyst Rachel Kim. “Rigorous screening and ongoing employee security training remain critical.”

As Kraken integrates more of Cryptowatch’s acclaimed technology while sunsetting legacy platforms, the exchange reaffirmed its commitment to security, innovation, and user trust in the fast-evolving world of cryptocurrency.

Find this News Interesting! Follow us on Google News, LinkedIn, & X to Get Instant Updates!

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago