# 何一 Outlines Tactics in Suspected North Korea-Linked Crypto Attacks

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/48026
Published: 2026-11-03T21:43:49.000Z
Updated: 2026-11-03T21:43:49.000Z
Section: Technology

> The methods included fake job interviews, malicious developer tools, compromised software packages and browser extensions, fake video-conferencing apps, and social engineering.

何一 described the activity as part of continued targeting of the crypto industry by state-backed hacker groups. The attempts included fake job interviews and malware disguised as popular developer tools.

Other methods involved compromised software packages, browser extensions and fake video-conferencing apps. Social-engineering attacks aimed to steal account credentials or deploy remote-access malware.

何一 said Binance blocked many of the attempts and warned that a single attack getting through could carry severe costs.


