DPRK IT Network Breach Exposes $1M/Month Fraud Scheme

Share:
Leaked logs reveal DPRK-linked IT workers ran a structured crypto-fraud network processing about $1M/month across 390 accounts, with chat logs and transaction trails exposed. Weak passwords and use of OFAC-listed companies, plus organized reverse-engineering and identity fraud, enabled coordinated KYC circumvention and ongoing revenue generation, highlighting security risks for exchanges and crypto services (CEX/DEX). The breach provides rare visibility into DPRK crypto operations, increasing regulatory and compliance scrutiny and signalling systemic risk to crypto adoption and platform integrity.
- DPRK IT workers ran a $1M/month crypto-fraud network with structured pipelines.
- Weak passwords and OFAC-listed companies exposed major operational vulnerabilities.
- Training logs reveal organized reverse-engineering and identity fraud for revenue.
A recent investigation by blockchain analyst ZachXBT uncovered a large-scale internal breach tied to North Korean IT workers. The leaked data exposed a network of 390 accounts, chat logs, and crypto transactions.
Besides, the findings reveal a coordinated system that processed around $1M per month through fraudulent identities and financial deception. Consequently, the breach provides rare visibility into how these operations function behind the scenes.
ZachXBT reported that an unnamed source provided the data after compromising a device linked to a DPRK IT worker. The infection stemmed from an infostealer, which extra…
Read The Full Article DPRK IT Network Breach Exposes $1M/Month Fraud Scheme On Coin Edition.
Read More

