Türkçe
Español
A prominent global cryptocurrency platform recently uncovered a suspicious job application from a person believed to be of North Korean origin using a fake identity. The incident was brought to light following a thorough review by the company’s security unit.
Fake Identity and Application Process
The individual, who applied for an IT position under the name “Steven Smith,” presented documents riddled with inconsistencies. Despite claiming to be from Houston, the driver’s license screenshot showed an address approximately 300 miles away. The applicant also alleged to be a New York University graduate with a decade of experience at U.S.-based firms.
Such occurrences, reminiscent of movie plots, underline the advanced social engineering techniques employed by hackers affiliated with the North Korean state, such as the Lazarus group.
Kraken’s Security Strategy
Kraken’s Chief Security Officer, Nick Percoco, expressed a preference for directly confronting attackers during the evaluation of such applications.
Nick Percoco: “We like to look attackers in the eye. While some may view this as intimidation, we consider it a security investigation. Their missions are structured around entering the workforce to steal intellectual property and company assets.”
The noted document discrepancies heightened doubts regarding the applicant’s true identity. The individual attempted to portray themselves as competent and experienced through false declarations.
In light of the gathered information, the individual has been placed on a “Do Not Hire” list. Speculations suggest potential connections to North Korean leader Kim Jong Un. The United Nations highlights that North Korea annually garners significant revenue through such methods.
Kraken’s security officials are diligently investigating the matter. The company announced a review of existing security protocols to prevent similar incidents in the future, noting the case also resonated within the international cybersecurity sphere.
This incident serves as a stark reminder of the seriousness of fraudulent declarations and attempted scams, emphasizing the need for enhanced security measures on digital platforms. The involved firm is developing strategies to enable quicker responses to similar situations in the future.
