North Korean Hackers Target Crypto Workers with Fake Job Offers

North Korean Hackers Target Crypto Workers with Fake Job Offers

By Azertyswe | Azertyswe | 4 Sep 2025


 

a8ad4f81d77b43be8697ee70a9653b09c5c8c5780b61dc03a6f31aeedff09af9.jpg

A new cyber threat is hitting the crypto world hard. North Korean hackers are running a campaign where they pretend to be recruiters on LinkedIn and Telegram to trick people in the blockchain and crypto sector into downloading malicious software.

Security researchers call this operation Contagious Interview and it has already fooled developers and security engineers who thought they were applying for real jobs at big companies.

 

How the attack works

Hackers make fake recruiter profiles on LinkedIn and send messages about high paying jobs. They even run interviews on Zoom or Telegram so everything feels real.

At some point during the so called hiring process the victim gets asked to download a coding test or technical file, but instead of a normal file it installs malware on their computer. After that the hackers can steal crypto wallets, private keys, or company data without anyone noticing until it is too late.

Researchers from SentinelOne and Validin say this is part of a bigger campaign by North Korean groups to fund their regime with stolen crypto. In 2024 alone more than 1,3 billion dollars worth of crypto was stolen through these kinds of attacks.

 

Why this matters

This is state sponsored hacking aimed directly at people inside teh blockchain world. Developers, auditors, and even community managers have been contacted by fake recruiters.

Every time LinkedIn or Telegram shuts down a fake profile the attackers create new ones. They even make fake company websites that look just like the real thing to trick people even more.

 

Things to watch out for

If you work in crypto or tech here are some warning signs

  1. Too good to be true offers, always check the company website and recruiter name, LinkedIn is a great place

  2. Files from unknown people, real recruiters almost never ask you to download anything, if they do, scan it first

  3. Email addresses from Gmail or Outlook instead of the real company domain, this is a dead give away

  4. Contact the company directly if you are not sure

  5. Keep your work files and private crypto keys on different devices

  6. Perhaps consider using a VM

 

What companies should do

Companies in crypto need to help protect their workers. Experts suggest

  • Training people to spot phishing and fake job offers

  • Using two factor authentication on all work accounts

  • Running security tools that can find malware if someone clicks the wrong thing

 

The bigger picture

North Korea has long used hacking groups like Lazarus to steal crypto and fund its weapons program. Before they mostly attacked exchanges and DeFi platforms. Now they are going after people directly. If they can hack one developer’s laptop they might later hack the whole network.

 


 

TLDR;

North Korean hackers targeting crypto workers with fake job offers

Attack method: Fake recruiters on LinkedIn & Telegram,  malware in coding tests

Estimated funds stolen $1,34 billion in 2024 alone

Who is at risk? Developers, security engineers, anyone in blockchain & crypto

Prevention tips: Verify recruiters, avoid unknown files, use MFA/2FA, separate work & crypto keys

 


Now to other things, also called Off-topic.

Useful off-topic links where you can earn crypto via faucet or gambling:


Feel like sharing your wealth, be my guest,

BSC and ETH address: 0x849bCA745E9F8e0c7dd58d553d05d4c5AD280e46
SOL: 74aj5yyz8cPvZWu62Tm5qqyBMXZzvGG8nSGX4sHgnd8Q


Support a Cyberpunk Shop on Etsy!

This is my Etsy shop. I'm really struggling and could use the help with some traffic or better if you like my products an order. Right now I have a promo running. If you feel like checking it out, I would be grateful.

Love cyberpunk aesthetics? Support small businesses by shopping unique, high-quality designs from independent creators. Every purchase fuels creativity and keeps the future stylish!

🛒 Shop now: https://eightofsweden.etsy.com

How do you rate this article?

2


Azertyswe
Azertyswe

Developer, Investing in Crypto and Stocks, looking for new tech to learn!


Azertyswe
Azertyswe

My thoughts and info regarding Crypto that is both awesome and terrifying.

Publish0x

Send a $0.01 microtip in crypto to the author, and earn yourself as you read!

20% to author / 80% to me.
We pay the tips from our rewards pool.