{"id":179705,"date":"2023-08-07T17:40:34","date_gmt":"2023-08-07T17:40:34","guid":{"rendered":"https:\/\/precoinnews.com\/?p=179705"},"modified":"2023-08-07T17:40:34","modified_gmt":"2023-08-07T17:40:34","slug":"coinspaid-claims-north-korean-hacking-group-used-fake-job-interview-to-steal-37m","status":"publish","type":"post","link":"https:\/\/precoinnews.com\/crypto\/coinspaid-claims-north-korean-hacking-group-used-fake-job-interview-to-steal-37m\/","title":{"rendered":"CoinsPaid claims North Korean hacking group used fake job interview to steal $37M"},"content":{"rendered":"

Estonia-based cryptocurrency payments firm CoinsPaid suspects North Korean hackers with the Lazarus Group gained access to its systems through fake recruiters targeting employees.<\/p>\n

In an Aug. 7 blog post, CoinsPaid said an exploit which allowed hackers to steal more than $37 million on July 22 was the result of tricking one employee into downloading software during a fake job interview, having them believe they were completing a technical task. The firm reported that the worker responded to a job offer put out by hackers and downloaded the malicious code, allowing the bad actors to steal information and give them access to CoinsPaid\u2019s infrastructure.<\/p>\n

\u201cHaving gained access to the CoinsPaid infrastructure, the attackers took advantage of a vulnerability in the cluster and opened a backdoor,\u201d said CoinsPaid. \u201cThe knowledge perpetrators gained at the exploration stage enabled them to reproduce legitimate requests for interaction interfaces with the blockchain and withdraw the company’s funds from our operational storage vault.\u201d<\/p>\n

Related: <\/em><\/strong>Curve hacker behind $61M heist begins returning funds<\/em><\/strong><\/p>\n

In its July 26 post-mortem report of the hack, CoinsPaid said it suspected Lazarus Group. Prior to the $37-million exploit, the hackers had made several attempts to infiltrate the platform starting in March 2023, but switched their approach to \u201chighly sophisticated and vigorous social engineering techniques\u201d after multiple failures \u2014 targeting individual workers rather than the company itself.<\/p>\n

<\/p>\n

CoinsPaid said it had partnered with blockchain security company Match Systems to track the stolen funds, the majority of which were transferred to SwftSwap. According to the firm, many aspects of the hackers\u2019 transactions mirrored those of the Lazarus Group, as in the $35-million hack of Atomic Wallet in June. The company was continuing to monitor any movement of the funds as of Aug. 7.\u00a0<\/p>\n

Magazine: <\/em><\/strong>Should crypto projects ever negotiate with hackers? Probably<\/em><\/strong><\/p>\n

Source: Read Full Article<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Estonia-based cryptocurrency payments firm CoinsPaid suspects North<\/p>\n","protected":false},"author":3,"featured_media":179704,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"yoast_head":"\nCoinsPaid claims North Korean hacking group used fake job interview to steal $37M - Pre Coin News<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/precoinnews.com\/crypto\/coinspaid-claims-north-korean-hacking-group-used-fake-job-interview-to-steal-37m\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CoinsPaid claims North Korean hacking group used fake job interview to steal $37M - Pre Coin News\" \/>\n<meta property=\"og:description\" content=\"Estonia-based cryptocurrency payments firm CoinsPaid suspects North\" \/>\n<meta property=\"og:url\" content=\"https:\/\/precoinnews.com\/crypto\/coinspaid-claims-north-korean-hacking-group-used-fake-job-interview-to-steal-37m\/\" \/>\n<meta property=\"og:site_name\" content=\"Pre Coin News\" \/>\n<meta property=\"article:published_time\" content=\"2023-08-07T17:40:34+00:00\" \/>\n<meta name=\"author\" content=\"mediabest\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/precoinnews.com\/wp-content\/uploads\/2023\/08\/CoinsPaid-claims-North-Korean-hacking-group-used-fake-job-interview-to-steal-37M.jpg\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"mediabest\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/precoinnews.com\/crypto\/coinspaid-claims-north-korean-hacking-group-used-fake-job-interview-to-steal-37m\/\",\"url\":\"https:\/\/precoinnews.com\/crypto\/coinspaid-claims-north-korean-hacking-group-used-fake-job-interview-to-steal-37m\/\",\"name\":\"CoinsPaid claims North Korean hacking group used fake job interview to steal $37M - Pre Coin News\",\"isPartOf\":{\"@id\":\"https:\/\/precoinnews.com\/#website\"},\"datePublished\":\"2023-08-07T17:40:34+00:00\",\"dateModified\":\"2023-08-07T17:40:34+00:00\",\"author\":{\"@id\":\"https:\/\/precoinnews.com\/#\/schema\/person\/ad0e9920e03d3b41c7ad02a18375d76a\"},\"breadcrumb\":{\"@id\":\"https:\/\/precoinnews.com\/crypto\/coinspaid-claims-north-korean-hacking-group-used-fake-job-interview-to-steal-37m\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/precoinnews.com\/crypto\/coinspaid-claims-north-korean-hacking-group-used-fake-job-interview-to-steal-37m\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/precoinnews.com\/crypto\/coinspaid-claims-north-korean-hacking-group-used-fake-job-interview-to-steal-37m\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/precoinnews.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Crypto\",\"item\":\"https:\/\/precoinnews.com\/category\/crypto\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"CoinsPaid claims North Korean hacking group used fake job interview to steal $37M\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/precoinnews.com\/#website\",\"url\":\"https:\/\/precoinnews.com\/\",\"name\":\"Pre Coin News\",\"description\":\"precoinnews.com\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/precoinnews.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/precoinnews.com\/#\/schema\/person\/ad0e9920e03d3b41c7ad02a18375d76a\",\"name\":\"mediabest\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/precoinnews.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/f5f13cb3b94fc348d515c0951f6ca073?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/f5f13cb3b94fc348d515c0951f6ca073?s=96&d=mm&r=g\",\"caption\":\"mediabest\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CoinsPaid claims North Korean hacking group used fake job interview to steal $37M - Pre Coin News","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/precoinnews.com\/crypto\/coinspaid-claims-north-korean-hacking-group-used-fake-job-interview-to-steal-37m\/","og_locale":"en_US","og_type":"article","og_title":"CoinsPaid claims North Korean hacking group used fake job interview to steal $37M - Pre Coin News","og_description":"Estonia-based cryptocurrency payments firm CoinsPaid suspects North","og_url":"https:\/\/precoinnews.com\/crypto\/coinspaid-claims-north-korean-hacking-group-used-fake-job-interview-to-steal-37m\/","og_site_name":"Pre Coin News","article_published_time":"2023-08-07T17:40:34+00:00","author":"mediabest","twitter_card":"summary_large_image","twitter_image":"https:\/\/precoinnews.com\/wp-content\/uploads\/2023\/08\/CoinsPaid-claims-North-Korean-hacking-group-used-fake-job-interview-to-steal-37M.jpg","twitter_misc":{"Written by":"mediabest","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/precoinnews.com\/crypto\/coinspaid-claims-north-korean-hacking-group-used-fake-job-interview-to-steal-37m\/","url":"https:\/\/precoinnews.com\/crypto\/coinspaid-claims-north-korean-hacking-group-used-fake-job-interview-to-steal-37m\/","name":"CoinsPaid claims North Korean hacking group used fake job interview to steal $37M - Pre Coin News","isPartOf":{"@id":"https:\/\/precoinnews.com\/#website"},"datePublished":"2023-08-07T17:40:34+00:00","dateModified":"2023-08-07T17:40:34+00:00","author":{"@id":"https:\/\/precoinnews.com\/#\/schema\/person\/ad0e9920e03d3b41c7ad02a18375d76a"},"breadcrumb":{"@id":"https:\/\/precoinnews.com\/crypto\/coinspaid-claims-north-korean-hacking-group-used-fake-job-interview-to-steal-37m\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/precoinnews.com\/crypto\/coinspaid-claims-north-korean-hacking-group-used-fake-job-interview-to-steal-37m\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/precoinnews.com\/crypto\/coinspaid-claims-north-korean-hacking-group-used-fake-job-interview-to-steal-37m\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/precoinnews.com\/"},{"@type":"ListItem","position":2,"name":"Crypto","item":"https:\/\/precoinnews.com\/category\/crypto\/"},{"@type":"ListItem","position":3,"name":"CoinsPaid claims North Korean hacking group used fake job interview to steal $37M"}]},{"@type":"WebSite","@id":"https:\/\/precoinnews.com\/#website","url":"https:\/\/precoinnews.com\/","name":"Pre Coin News","description":"precoinnews.com","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/precoinnews.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/precoinnews.com\/#\/schema\/person\/ad0e9920e03d3b41c7ad02a18375d76a","name":"mediabest","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/precoinnews.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/f5f13cb3b94fc348d515c0951f6ca073?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f5f13cb3b94fc348d515c0951f6ca073?s=96&d=mm&r=g","caption":"mediabest"}}]}},"_links":{"self":[{"href":"https:\/\/precoinnews.com\/wp-json\/wp\/v2\/posts\/179705"}],"collection":[{"href":"https:\/\/precoinnews.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/precoinnews.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/precoinnews.com\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/precoinnews.com\/wp-json\/wp\/v2\/comments?post=179705"}],"version-history":[{"count":0,"href":"https:\/\/precoinnews.com\/wp-json\/wp\/v2\/posts\/179705\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/precoinnews.com\/wp-json\/wp\/v2\/media\/179704"}],"wp:attachment":[{"href":"https:\/\/precoinnews.com\/wp-json\/wp\/v2\/media?parent=179705"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/precoinnews.com\/wp-json\/wp\/v2\/categories?post=179705"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/precoinnews.com\/wp-json\/wp\/v2\/tags?post=179705"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}