North Korean hackers steal from Linkedin resumes to search for work in the crypto industry – Bits Media

According to the latest report by Bloomberg and Mandiant security researchers, Hackers sponsored by the DPRK government now pay more attention to the new method of theft of funds in the digital currency market.

Instead of that, to hack vulnerable crypto -tires and others Projects, such as Harmony, Now members of the Lazarus Group are impersonating IT specialists - attackers are stealing users' resumes on LinkedIn.

Mandiant analyst Joe Dobson (Joe Dobson) speaks, that stolen resumes are subsequently edited and sent to companies hiring blockchain developers - in the hope of obtaining inside information and creating backdoors, which will allow the use of these platforms later.

Resumes are mostly plagiarism, however, some of them also contain outright false information. So, some include supposedly official documents from cryptocurrency exchanges, that never existed, as well as vague job descriptions, which, probably, also never been in companies, from which the hacker appears to come from.

Mandiant has identified several companies, who hired allegedly fake applicants from the Lazarus Group, but did not publish information. Seems to be, the company will transfer data directly to affected companies.

The report indicates, that most borrowed or fake resumes mention the skills of Chinese and Russian specialists, however, fewer resumes were copied from developers in Africa and Southeast Asia. These resumes are then used to create several fake applicant profiles, many of which use almost the same language to describe their skill set.

In mid-July, former CIA agent Soo Kim (Love Kim) stated, that North Korea will continue cyberattacks on cryptocurrency companies, as the DPRK regime faces serious food shortages.