Featured News Headlines
$680K Crypto Hack Linked to North Korean IT Team Using Google Tools
A small team of North Korean IT workers linked to a $680,000 crypto hack in June has been infiltrating crypto projects by using fake identities and common tools, new evidence reveals. Screenshots from one worker’s device show how the group operates, relying on Google products and rented computers to hide their tracks.
Fake Profiles and Freelance Platforms

The six-person team shares at least 31 fake identities, including government IDs, phone numbers, and accounts on platforms like LinkedIn and Upwork. This allows them to land jobs in the crypto space, often as blockchain developers or smart contract engineers. One member even interviewed for a position at Polygon Labs, while others faked experience with well-known companies like OpenSea and Chainlink.
How They Work Remotely

These workers secure freelance roles and then use remote access software such as AnyDesk to carry out tasks for unaware employers. They also use VPNs to mask their true locations. Google Drive and Chrome tools help them organize schedules, budgets, and communication. They communicate in English, often using Google’s translation tools to assist.
Links to Major Crypto Hacks

The group has been tied to several large crypto thefts, including a $1.4 billion exploit on Bitbit exchange earlier this year. Recently, one wallet address linked to the team is connected to a $680,000 hack on fan-token marketplace Favrr. They frequently convert fiat to crypto using Payoneer for their operations.
The Call for Stronger Hiring Checks
Experts urge crypto and tech companies to improve hiring checks to avoid falling victim to such schemes. Many of these attacks are not highly sophisticated, but companies often overlook risks due to high volumes of applications. Cooperation between tech firms and freelance platforms is crucial to prevent these attacks.
Last month, the US Treasury sanctioned individuals and entities tied to this North Korean hacking group to curb their activity.








