Sign up
Subscribe
Home / news / 🏴‍☠️Around one hundred North Korean spies🇰🇵infiltrated into WEB3 companies have been exposed
news

🏴‍☠️Around one hundred North Korean spies🇰🇵infiltrated into WEB3 companies have been exposed

🏴‍☠️Around one hundred North Korean spies🇰🇵infiltrated into WEB3 companies have been exposed

The operation was uncovered through the Ketman project, conducted under the ETH Rangers security program of the Ethereum Foundation.

💡 New scheme: while North Korean actors previously focused on remote attacks and exchange hacks, since last year they have shifted toward infiltrating personnel who can pass standard HR screening processes, gain access to internal repositories, and remain embedded within product teams for several months.

💡 Identification: the number of infiltrators is estimated at around 100 individuals, who used forged identity documents posing as IT professionals to gain entry into companies.

💡 Ketman: the project ran for six months. During this period, ETH Rangers funded the work of 17 independent researchers, recovered or froze USD 5.8 million, identified 785 vulnerabilities, and carried out 36 incident response actions.

💡 Context: in 2025 alone, actors linked to North Korea stole USD 2.02 billion, representing a 51% increase compared to 2024. Additionally, on April 1 this year, following the breach of Drift Protocol, USD 285 million was withdrawn — a figure currently considered a record within the DeFi ecosystem.

#news #fraud #Asia #crypto

🌎 payplanet.com verified partner for LatAm, India🇮🇳 Turkey🇹🇷 @pay_planet

Comments

Weekly high-risk digest

Regulation, sanctions and payment news across your verticals — once a week, free.

Please check your inbox and click the link to confirm your subscription.

Please enter a valid email address!