{"id":40909,"date":"2026-06-04T02:44:09","date_gmt":"2026-06-04T02:44:09","guid":{"rendered":"https:\/\/www.europesays.com\/korea\/40909\/"},"modified":"2026-06-04T02:44:09","modified_gmt":"2026-06-04T02:44:09","slug":"north-koreas-hackers-have-moved-beyond-brute-force-says-fbi-veteran-kim-jong-uns-crypto-attackers-now-have-a-new-tool-you","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/korea\/40909\/","title":{"rendered":"North Korea&#8217;s Hackers Have Moved Beyond Brute Force, Says FBI Veteran: Kim Jong Un&#8217;s Crypto Attackers Now Have A New Tool \u2014 You"},"content":{"rendered":"<p>    <img fetchpriority=\"high\" decoding=\"async\" src=\"https:\/\/s.yimg.com\/ny\/api\/res\/1.2\/AB2vqNWBJEieFG19mwPGIQ--\/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY3NQ--\/https:\/\/media.zenfs.com\/en\/Benzinga\/9d3f5edd48cd9ee19a444303544f0cdb\" alt=\"\" loading=\"eager\" height=\"675\" width=\"960\" class=\"yf-lglytj  loaded\"\/>     <\/p>\n<p class=\"yf-1fy9kyt\">North Korea&#8217;s state-backed hackers have an \u201caggressive, relentless\u201d knack for finding and exploiting vulnerabilities, making them more dangerous than other groups, a former FBI agent told Benzinga.<\/p>\n<p>      Social Engineering Hacks?    <\/p>\n<p class=\"yf-1fy9kyt\">North Korean hackers pose an existential threat to cryptocurrency ecosystems, having stolen\u00a0over $2 billion worth of assets in 2025 alone. Things have worsened in 2026, with April recording the <a href=\"https:\/\/www.benzinga.com\/crypto\/cryptocurrency\/26\/05\/52205487\/north-korea-linked-hackers-make-april-the-worst-month-for-crypto-hacking-by-incident-count?nid=52991093&amp;utm_campaign=partner_feed&amp;utm_content=site&amp;utm_medium=partner_feed&amp;utm_source=yahooFinance\" rel=\"sponsored nofollow noopener\" data-i13n=\"elm:affiliate_link;elmt:premonetized\" target=\"_blank\" data-ylk=\"slk:highest number of cryptocurrency hacking incidents;elm:affiliate_link;elmt:premonetized;itc:0;sec:content-canvas\" data-yga=\"{&quot;yLinkElement&quot;:&quot;affiliate_link&quot;,&quot;yAffiliateService&quot;:&quot;premonetized&quot;,&quot;yModuleName&quot;:&quot;content-canvas&quot;,&quot;yLinkText&quot;:&quot;highest number of cryptocurrency hacking incidents&quot;,&quot;yHasCommerce&quot;:false}\" class=\"link \">highest number of cryptocurrency hacking incidents<\/a> on record.<\/p>\n<p class=\"yf-1fy9kyt\">The U.S. government\u00a0<a href=\"https:\/\/home.treasury.gov\/news\/press-releases\/sm774\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:claims;elm:context_link;itc:0;sec:content-canvas\" data-yga=\"{&quot;yLinkElement&quot;:&quot;context_link&quot;,&quot;yModuleName&quot;:&quot;content-canvas&quot;,&quot;yLinkText&quot;:&quot;claims&quot;}\" class=\"link \">claims<\/a>\u00a0that the illegal proceeds from the thefts are used to fund North Korea\u2019s weapons and missile program.<\/p>\n<p class=\"yf-1fy9kyt\">Stephanie Talamantez, who spent more than 20 years with the FBI and now serves as Senior Managing Director at Guidepost Solutions, said that these actors have progressed from simple hacking to sophisticated social engineering techniques.<\/p>\n<p class=\"yf-1fy9kyt\">\u201cA company can put all the guardrails in place possible, but attacks that exploit human psychology can bypass those defenses within moments,\u201d she said.<\/p>\n<p class=\"yf-1fy9kyt\">Talamantez stated that North Korea is running an \u201caggressive recruitment fraud\u201d in which perpetrators impersonate reputable cryptocurrency companies or headhunters, and that even she was approached in one such attempt on LinkedIn.<\/p>\n<p class=\"yf-1fy9kyt\">It\u2019s worth also highlighting the notorious 2022 Ronin Network breach, in which the Lazarus Group <a href=\"https:\/\/www.benzinga.com\/markets\/cryptocurrency\/22\/08\/28590133\/ronin-bridge-hackers-converted-most-loot-into-bitcoin-report?nid=52991093&amp;utm_campaign=partner_feed&amp;utm_content=site&amp;utm_medium=partner_feed&amp;utm_source=yahooFinance\" rel=\"sponsored nofollow noopener\" data-i13n=\"elm:affiliate_link;elmt:premonetized\" target=\"_blank\" data-ylk=\"slk:stole nearly $620 million;elm:affiliate_link;elmt:premonetized;itc:0;sec:content-canvas\" data-yga=\"{&quot;yLinkElement&quot;:&quot;affiliate_link&quot;,&quot;yAffiliateService&quot;:&quot;premonetized&quot;,&quot;yModuleName&quot;:&quot;content-canvas&quot;,&quot;yLinkText&quot;:&quot;stole nearly $620 million&quot;,&quot;yHasCommerce&quot;:false}\" class=\"link \">stole nearly $620 million<\/a> after infiltrating the network by posing as a recruiter on LinkedIn.<\/p>\n<p class=\"yf-1fy9kyt\">But these bad actors have also weaponized people&#8217;s trust in other ways.<\/p>\n<p>         \u2018Taking Their Time\u2019 To Select High-Value Targets    <\/p>\n<p class=\"yf-1fy9kyt\">Rongui Gu, co-founder and CEO of blockchain security firm\u00a0CertiK, pointed to Drift Protocol\u2019s\u00a0<a href=\"https:\/\/www.benzinga.com\/crypto\/cryptocurrency\/26\/04\/51633954\/north-korea-strikes-again-285-million-exploit-raises-questions-for-circle?nid=52991093&amp;utm_campaign=partner_feed&amp;utm_content=site&amp;utm_medium=partner_feed&amp;utm_source=yahooFinance\" data-i13n=\"elm:affiliate_link;elmt:premonetized\" rel=\"sponsored nofollow noopener\" target=\"_blank\" data-ylk=\"slk:$285\u00a0million exploit;elm:affiliate_link;elmt:premonetized;itc:0;sec:content-canvas\" data-yga=\"{&quot;yLinkElement&quot;:&quot;affiliate_link&quot;,&quot;yAffiliateService&quot;:&quot;premonetized&quot;,&quot;yModuleName&quot;:&quot;content-canvas&quot;,&quot;yLinkText&quot;:&quot;$285&amp;nbsp&quot;,&quot;yHasCommerce&quot;:false}\" class=\"link \">$285\u00a0million exploit<\/a>, where attackers spent months posing as a legitimate firm, met targets face-to-face at international conferences and even deposited $1 million of their own money into the platform to build trust.<\/p>\n<p class=\"yf-1fy9kyt\">\u201cThis tells us these groups are taking their time to hand-select targets and develop a strategy for infiltration, rather than spraying the market with low-value attacks,\u201d Gu told Benzinga.<\/p>\n<p class=\"yf-1fy9kyt\"> Read Also: <a href=\"https:\/\/www.benzinga.com\/crypto\/cryptocurrency\/26\/06\/52913067\/tom-lee-eths-price-doesnt-reflect-the-strengthening-of-ethereums-fundamentals?nid=52991093&amp;utm_campaign=partner_feed&amp;utm_content=site&amp;utm_medium=partner_feed&amp;utm_source=yahooFinance\" data-i13n=\"elm:affiliate_link;elmt:premonetized\" rel=\"sponsored nofollow noopener\" target=\"_blank\" data-ylk=\"slk:Tom Lee: &#039;ETH&#039;s Price Doesn&#039;t Reflect The Strengthening Of Ethereum&#039;s Fundamentals&#039;;elm:affiliate_link;elmt:premonetized;itc:0;sec:content-canvas\" data-yga=\"{&quot;yLinkElement&quot;:&quot;affiliate_link&quot;,&quot;yAffiliateService&quot;:&quot;premonetized&quot;,&quot;yModuleName&quot;:&quot;content-canvas&quot;,&quot;yLinkText&quot;:&quot;Tom Lee&quot;,&quot;yHasCommerce&quot;:false}\" class=\"link \"> Tom Lee: &#8216;ETH&#8217;s Price Doesn&#8217;t Reflect The Strengthening Of Ethereum&#8217;s Fundamentals&#8217;<\/a> <\/p>\n<p>      Crypto Industry\u2019s Weaknesses    <\/p>\n<p class=\"yf-1fy9kyt\">Despite one high-profile breach after another, the cryptocurrency sector has struggled to implement a sustainable, long-term defense.<\/p>\n<p class=\"yf-1fy9kyt\">\u201cI would argue that the industry&#8217;s biggest structural weakness is coordination,\u201d Gu stated, noting that asset freezes, law enforcement referrals, and analytics tracing often happen across different jurisdictions and compliance standards.<\/p>\n<p class=\"yf-1fy9kyt\">\u201cDPRK actors will exploit that fragmentation because just one weak intermediary can keep the laundering chain alive,\u201d the CertiK CEO added.<\/p>\n<p class=\"yf-1fy9kyt\">However, Talamantez pointed to a different problem: the silence of the victims.<\/p>\n<p class=\"yf-1fy9kyt\">\u201cOrganizations often hesitate to disclose that they have been targeted or successfully compromised, which limits the broader sharing of threat intelligence,\u201d the former FBI agent said. \u201cAs a result, other companies may remain unaware of active attack patterns.\u201d<\/p>\n<p>       The Way Ahead   <\/p>\n<p class=\"yf-1fy9kyt\">Gu believes that management teams need more security processes in place for transaction authorization, infrastructure protection and internal security awareness.<\/p>\n<p class=\"yf-1fy9kyt\">\u201cProjects should use formal verification to rigorously validate the logical correctness of underlying protocols and eliminate hidden vulnerabilities before deployment,\u201d he recommended.<\/p>\n<p class=\"yf-1fy9kyt\">Talamantez highlighted solutions such as smart contract analysis tools that execute \u201csimulated transactions\u201d beforehand to identify any malicious alterations.<\/p>\n<p class=\"yf-1fy9kyt\">She also emphasized the importance of human risk awareness, urging companies to train employees on what warning signs to watch for<\/p>\n<p class=\"yf-1fy9kyt\"> Read Also: <a href=\"https:\/\/www.benzinga.com\/crypto\/cryptocurrency\/26\/06\/52908236\/eth-continues-to-underperform-xrp-zcash-now-even-its-superfans-are-losing-hope?nid=52991093&amp;utm_campaign=partner_feed&amp;utm_content=site&amp;utm_medium=partner_feed&amp;utm_source=yahooFinance\" data-i13n=\"elm:affiliate_link;elmt:premonetized\" rel=\"sponsored nofollow noopener\" target=\"_blank\" data-ylk=\"slk:ETH Continues To Underperform XRP, Zcash: Now Even Its Superfans Are Losing Hope;elm:affiliate_link;elmt:premonetized;itc:0;sec:content-canvas\" data-yga=\"{&quot;yLinkElement&quot;:&quot;affiliate_link&quot;,&quot;yAffiliateService&quot;:&quot;premonetized&quot;,&quot;yModuleName&quot;:&quot;content-canvas&quot;,&quot;yLinkText&quot;:&quot;ETH Continues To Underperform XRP, Zcash&quot;,&quot;yHasCommerce&quot;:false}\" class=\"link \"> ETH Continues To Underperform XRP, Zcash: Now Even Its Superfans Are Losing Hope<\/a> <\/p>\n<p class=\"yf-1fy9kyt\">Photo Courtesy: Stephanie A. Talamantez<\/p>\n<p class=\"yf-1fy9kyt\">UNLOCKED: 5 NEW TRADES EVERY WEEK. <a href=\"https:\/\/www.benzinga.com\/premium\/ideas\/benzinga-edge-checkout\/?t=be8be9spja3yaad2&amp;utm_source=yahoo\" data-i13n=\"elm:affiliate_link;elmt:premonetized\" rel=\"sponsored nofollow noopener\" target=\"_blank\" data-ylk=\"slk:Click now to get top trade ideas daily;elm:affiliate_link;elmt:premonetized;itc:0;sec:content-canvas\" data-yga=\"{&quot;yLinkElement&quot;:&quot;affiliate_link&quot;,&quot;yAffiliateService&quot;:&quot;premonetized&quot;,&quot;yModuleName&quot;:&quot;content-canvas&quot;,&quot;yLinkText&quot;:&quot;Click now to get top trade ideas daily&quot;,&quot;yHasCommerce&quot;:false}\" class=\"link \">Click now to get top trade ideas daily<\/a>, plus unlimited access to cutting-edge tools and strategies to gain an edge in the markets.<\/p>\n<p class=\"yf-1fy9kyt\">Get the latest stock analysis from Benzinga:<\/p>\n<p class=\"yf-1fy9kyt\">This article <a href=\"https:\/\/www.benzinga.com\/crypto\/cryptocurrency\/26\/06\/52991093\/north-korea-hackers-beyond-brute-force-fbi-veteran-crypto-attackers-new-tool-you\" data-i13n=\"elm:affiliate_link;elmt:premonetized\" rel=\"sponsored nofollow noopener\" target=\"_blank\" data-ylk=\"slk:North Korea&#039;s Hackers Have Moved Beyond Brute Force, Says FBI Veteran: Kim Jong Un&#039;s Crypto Attackers Now Have A New Tool \u2014 You;elm:affiliate_link;elmt:premonetized;itc:0;sec:content-canvas\" data-yga=\"{&quot;yLinkElement&quot;:&quot;affiliate_link&quot;,&quot;yAffiliateService&quot;:&quot;premonetized&quot;,&quot;yModuleName&quot;:&quot;content-canvas&quot;,&quot;yLinkText&quot;:&quot;North Korea&amp;amp&quot;,&quot;yHasCommerce&quot;:false}\" class=\"link \">North Korea&#8217;s Hackers Have Moved Beyond Brute Force, Says FBI Veteran: Kim Jong Un&#8217;s Crypto Attackers Now Have A New Tool \u2014 You<\/a> originally appeared on <a href=\"https:\/\/www.benzinga.com\" data-i13n=\"elm:affiliate_link;elmt:premonetized\" rel=\"sponsored nofollow noopener\" target=\"_blank\" data-ylk=\"slk:Benzinga.com;elm:affiliate_link;elmt:premonetized;itc:0;sec:content-canvas\" data-yga=\"{&quot;yLinkElement&quot;:&quot;affiliate_link&quot;,&quot;yAffiliateService&quot;:&quot;premonetized&quot;,&quot;yModuleName&quot;:&quot;content-canvas&quot;,&quot;yLinkText&quot;:&quot;Benzinga.com&quot;,&quot;yHasCommerce&quot;:false}\" class=\"link \">Benzinga.com<\/a><\/p>\n<p class=\"yf-1fy9kyt\">\u00a9 2026 Benzinga.com. Benzinga does not provide investment advice. All rights reserved.<\/p>\n","protected":false},"excerpt":{"rendered":"North Korea&#8217;s state-backed hackers have an \u201caggressive, relentless\u201d knack for finding and exploiting vulnerabilities, making them more dangerous&hellip;\n","protected":false},"author":2,"featured_media":40910,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[24737,24738,6254,141,31,34,24736],"class_list":["post-40909","post","type-post","status-publish","format-standard","has-post-thumbnail","category-north-korea","tag-aggressive-recruitment","tag-existential-threat","tag-fbi","tag-kim-jong-un","tag-korea","tag-north-korea","tag-stephanie-talamantez"],"_links":{"self":[{"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/posts\/40909","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/comments?post=40909"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/posts\/40909\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/media\/40910"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/media?parent=40909"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/categories?post=40909"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/tags?post=40909"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}