朝鲜黑客试图渗入kraken-但平台转过身

我们看到了另一个基于区块链的平台和加密公司的实例，这似乎是秘密但朝鲜黑客广泛的广告活动。

Kraken, a leading cryptocurrency platform, has reportedly encountered an infiltration attempt by a North Korean hacker, who applied for an engineering role at the company. However, instead of rejecting the candidate, Kraken decided to study the attacker’s tactics in real-time, providing multiple insights valuable to the entire industry.

据报道，领先的加密货币平台克雷肯（Kraken）遇到了朝鲜黑客的渗透尝试，后者申请了该公司的工程角色。但是，克雷肯决定实时研究攻击者的策略，而不是拒绝候选人，为整个行业提供了多种见解。

As reported by Chainalysis, this incident began when the candidate, who initially joined a call with a different name than the one listed on their resume, also switched between voices during the interview, suggesting they might be getting coaching from another party.

正如Chainalysis报道的那样，这一事件始于候选人最初加入与简历上列出的名字不同的候选人，在面试中也在声音之间切换，这表明他们可能会从另一个聚会上获得教练。

This behavior, recognized by Kraken as a common tactic used by North Korean hacker cells, raised further suspicion. Their internal Red Team was engaged and initiated an OSINT investigation, examining breach data, identity clusters, and the candidate’s online activity.

这种行为被克莱肯认为是朝鲜黑客细胞使用的一种常见策略，引起了人们的怀疑。他们的内部红色团队参与其中，并开始了OSINT调查，检查了漏洞数据，身份集群和候选人的在线活动。

The investigation confirmed the individual was tied to a broader network of aliases and forged identities, one of which was directly linked to a person on international sanctions lists. This finding implicated the candidate with a North Korean APT group focused on cryptocurrency theft.

调查证实，该个人与更广泛的别名和伪造身份联系在一起，其中一个直接与国际制裁名单上的人有关。这一发现暗示了朝鲜公寓集团的候选人重点是加密货币盗窃。

Furthermore, technical analysis of the candidate’s devices revealed anomalies and misconfigurations typically found in compromised systems, further supporting the hypothesis of malicious intent.

此外，对候选人设备的技术分析揭示了在折衷的系统中通常发现的异常和错误配置，进一步支持了恶意意图的假设。

The candidate also displayed an unusually close proximity to the interviewer despite being in a different country, which, according to Kraken, was another indicator employed by North Korean hacker cells to maintain a persistent presence in a targeted company’s ecosystem.

尽管在一个不同的国家，但候选人还表现出与面试官的异常接近，据克雷肯（Kraken）称，这是朝鲜黑客细胞在目标公司的生态系统中持续存在的另一个指标。

Finally, they failed to respond convincingly to a question about a tattoo visible on their arm during the interview, becoming evasive and unable to verify basic personal details.

最后，他们未能令人信服地回答一个关于面试期间纹身可见的问题，变得逃避，无法验证基本的个人细节。

In a statement shared by email, CSO Nick Percoco concluded:

在电子邮件分享的一份声明中，CSO Nick Percoco得出结论：

“Don’t trust, verify. This core crypto principle is more relevant than ever in the digital age. State-sponsored attacks aren’t just a crypto, or U.S. corporate, issue — they’re a global threat. Any individual or business handling value is a target, and resilience starts with operationally preparing to withstand these types of attacks. We're grateful for the opportunity to contribute to the collective defense by sharing our experience.”

“不要相信，验证。在数字时代，这种核心加密原则比以往任何时候都更有意义。国家赞助的攻击不仅是一个加密货币或美国公司问题 - 它们是全球威胁。任何个人或企业处理价值都是目标，而且弹性始于运营始于在运营上准备承受这些类型的攻击。我们为这些类型的攻击提供了机会，我们可以通过共享我们的辩护经验来贡献我们的经验。