North Korea Blamed for May's $305M Hack on Japanese Crypto Exchange DMM

Key Points

  • **North Korean hackers, affiliated with the group TraderTraitor, were behind the $308 million hack of Japanese crypto exchange DMM in May.
  • **The FBI, Department of Defense Cyber Crime Center, and National Police Agency of Japan confirmed the involvement of North Korean operatives in the theft of 4,502.9 bitcoin.
  • **North Korea is linked to over half of the crypto value stolen in 2024, with its operatives stealing $1.34 billion across 47 incidents.
  • **TraderTraitor used social engineering tactics, inserting malicious code into a Python script sent via LinkedIn to gain access to Ginco's communications system.
  • **The hack involved intercepting a legitimate transaction request by a DMM employee, leading to the theft.

Summary

The $308 million hack of the Japanese crypto exchange DMM in May was attributed to North Korean hackers associated with the group known as TraderTraitor, according to a joint statement from the FBI, the Department of Defense Cyber Crime Center, and Japan's National Police Agency. The hackers stole 4,502.9 bitcoin, leading to the closure of the exchange. North Korea has been identified as a major player in crypto crime this year, with its operatives linked to over half of the stolen crypto value, amounting to $1.34 billion across 47 incidents. The attack on DMM involved sophisticated social engineering where a malicious Python script was sent to a Ginco employee via LinkedIn, disguised as a pre-employment test. This script, once copied to the employee's personal Github page, allowed the hackers to access Ginco's communications system. Months later, they likely intercepted a legitimate transaction request from a DMM employee, facilitating the theft.

coindesk
December 24, 2024
Crypto
Read article

Related news