On-Chain Thruce ZACHXBT claims that North Korean IT workers are responsible for at least 25 cases of hacking and ransomware exploitation related to companies in the crypto industry.
summary
- Zachxbt argues that at least 25 attacks and exploitation cases in the crypto sector are linked to North Korean IT workers.
- Many US crypto companies have been warned against the employment of North Korean IT workers who may be trying to gain insider access.
In a post in response to Amjad Masad, CEO of AI coding platform, blockchain investigator ZachxBT highlighted how North Korean IT workers are responsible for the numerous crypto-related hacks and terr schemes involving crypto companies.
On September 25, Masad shared an X video showing how remote North Korean workers can interview cheat tools to get jobs at major US crypto companies, more often using AI filters.
“Not only does North Korea know that our market is full of remote IT workers, but we can get jobs using AI filters and fraudulent tools for AI interviews, not just to make money for DPRK,” Masad said in his latest post.
You might like it too: Changpeng Zhao shares how North Korean hackers are invading top crypto companies
Zachxbt opposed Masad and said these efforts were not harmless. Many North Korean IT workers who use AI to chegate interviews and participate in US crypto companies can do so with creepy objectives in mind.
“‘Don’t break in’, this is actually a common misconception. At least there are 25 or more instances that force a team of DPRK ITWS hacks or funds,” ZachxBT said.
To bolster his claims, Web3 Sleuth shared past research, showing that multiple crypto projects have infiltrated the victims of attacks by North Korean hacking groups from within. Based on his research, there have been at least 25 cybersecurity attacks and ransomware intrusions in the crypto industry associated with remote North Korean workers.
“We acknowledged that all these companies were involved in crypto,” he added.
You might like it too: Thorchain co-founder loses $1.3 million in North Korea’s Zoom scam
Zachxbt claims that North Korean IT workers are primarily using USDC
This is not the first time Zachxbt has warned crypto companies to North Korean IT workers. Last July, Crypto Sleuth highlighted the fact that North DPRK Hackers reportedly poured millions of funds into illegal payments using USDC (USDC). The allegations surfaced as Circle filed a National Trust Bank Charter.
On-chain analysts criticize the circle’s approach, claiming that despite the size and transparency of the transaction, the company has failed to address the issue. He claimed that the Stablecoin publisher had not taken any action to detect or freeze activity.
As more and more crypto companies and employees begin to fall victim to hacks launched by North Korean actors, more crypto figures are warning the community against hiring remote workers from North Korea.
More recently, former Binance Head Changpeng “CZ” Zhao has warned the crypto community of North Korean hackers that they are disguising themselves as future employees to infiltrate top crypto companies.
One of the tactics he highlighted was the use of fake recruitment applications in which operatives posed as candidates for role roles related to development, security and finance, to gain insider access.
Another strategy he warned was how they frequently pose as recruiters and approach existing employees by pretending to represent rival companies. According to CZ, during the early interview phase, these actors frequently claim that they have technical issues with Zoom, asking potential victims to download malicious “updates” via shared links.
You might like it too: Changpeng Zhao shares how North Korean hackers are invading top crypto companies
Discover more from Earlybirds Invest
Subscribe to get the latest posts sent to your email.


