The government of North Korea (DPRK) has reportedly employed various hacking groups, most notably the Lazarus Group, to seal crypto in recent years.
Hackers with ties to the North Korean government have reportedly expanded social engineering scams designed to steal cryptocurrencies by infiltrating “hundreds” of large, multinational information technology firms.
According to an article from TechCrunch, researchers at the Cyberwarcon cybersecurity conference identified two North Korean hacker groups called “Sapphire Sleet” and “Ruby Sleet.”
Sapphire Sleet targeted individuals through fraudulent employment schemes by posing as legitimate recruiters and luring unsuspecting victims into interviews or other offers of employment. The hackers would then infect the users’ computers with malware disguised as picture-document files (PDFs) or malicious links at some point during the interview process.
