The crypto security world is on high alert: the FBI has officially issued a wanted notice for four North Korean citizens. The scheme they orchestrated reads more like a spy thriller than a standard freelance gig.
💰 The Stakes: The hackers managed to steal over $900,000 in cryptocurrency using stolen identities and "laptop farms." The U.S. State Department is now offering a reward of up to $5 million for information leading to the disruption of their financial networks.
How the Scheme Worked
In 2022, the group posed as remote software engineers to get hired by American and Serbian IT firms. To bypass sophisticated security checks, they used:
Stolen Identities: Using data from real U.S. citizens to pass KYC and background checks."Laptop Farms": Accomplices rented apartments in the U.S. where companies sent work laptops. These "helpers" plugged them in, allowing hackers in North Korea to control the devices remotely via VPN/VPS, mimicking a local presence.AI Deepfakes: During video interviews, they used AI to alter their faces and voices in real-time.
Laundering via Tornado Cash 🌪️
After gaining access to internal systems and corporate digital wallets, the criminals drained the funds and attempted to mask the trail using the Tornado Cash mixer. Earlier in 2025, the U.S. DOJ raided 29 such "farms" across 16 states, but the masterminds remain at large.
⚠️ Why This Matters for Business & Crypto
North Korea has deployed thousands of highly skilled IT workers globally. Their goals go beyond just stealing salaries:
Installing backdoors in blockchain project code.Theft of intellectual property and military tech.Collecting sensitive client data for future extortion.
Pro-Tip for HR and Founders: Vet remote hires with extreme caution. If a candidate refuses face-to-face meetings or exhibits strange video lag/artifacts during calls, it’s a major red flag.
What’s your take? Is AI-driven fraud becoming the biggest threat to Web3 hiring in 2025? Let’s discuss in the comments! 👇
#FBI #CyberSecurity