North Korean Hackers Target Crypto Developers Using U.S. Shell Companies

North Korean hackers affiliated with the Lazarus Group have established fraudulent U.S. corporations to infiltrate the cryptocurrency sector. Security firm Silent Push revealed that entities named Blocknovas and Softglide were registered in New York and New Mexico using fabricated identities.

The operation, attributed to a Lazarus subgroup, reflects Pyongyang’s escalating sophistication in cybercrime. These fronts allegedly lure unsuspecting job applicants in crypto development roles, mirroring tactics used in previous billion-dollar digital asset heists.

Kasey Best of Silent Push notes the rarity of North Korean operatives successfully creating legal American business entities for offensive operations. The scheme underscores persistent security vulnerabilities in blockchain infrastructure despite industry maturation.