何一 Outlines Tactics in Suspected North Korea-Linked Crypto Attacks

何一 described the activity as part of continued targeting of the crypto industry by state-backed hacker groups. The attempts included fake job interviews and malware disguised as popular developer tools.

Other methods involved compromised software packages, browser extensions and fake video-conferencing apps. Social-engineering attacks aimed to steal account credentials or deploy remote-access malware.

何一 said Binance blocked many of the attempts and warned that a single attack getting through could carry severe costs.