North Korean Hackers Exploit Fake Identities to Infiltrate Crypto Projects

Blockchain investigator ZachXBT has uncovered a sophisticated operation by North Korean hackers involving fake identities and mainstream tech tools to steal cryptocurrency. A small team of five IT workers allegedly used over 30 fabricated personas—complete with government IDs and purchased LinkedIn/Upwork accounts—to secure developer roles at crypto firms.

The hackers Leveraged Google resources, VPNs, and borrowed devices to mask their locations. One member reportedly interviewed for a role at Polygon Labs, while others falsified employment histories at OpenSea and Chainlink. A leaked spreadsheet revealed operational expenses, though the document was truncated.

The group's recent theft of $680,000 highlights persistent security vulnerabilities in crypto hiring practices. No specific coins or exchanges were directly compromised in this incident.