最新报道：According to Bijie.com, Binance founder Changpeng Zhao (CZ) has issued a warning to cryptocurrency projects about North Korean hackers. He detailed how the group is using increasingly sophisticated tactics to gain access to companies. The operatives are exploiting the recruitment process. CZ shared his concerns in a September 18th post on X, describing the hackers as "advanced, creative, and patient." He explained that the most common method used by these individuals is to impersonate job applicants to secure company positions, particularly in development, security, and finance, thereby providing a "stepping stone." In other cases, the group impersonates employers and attempts to interview employees, using the process to distribute malware. Zhao noted that during these meetings, the attackers often claim there's a problem with Zoom and then send a virus-laced "update" link, or they provide coding questions and then provide "sample code" embedded with malware. Another tactic involves impersonating users who submit customer support tickets containing malicious links. CZ added that hackers also pay or bribe employees and hired vendors to obtain data, pointing to a recent case in India where an outsourcing services company was compromised, resulting in a data breach at a major US exchange that cost over $400 million. This alert follows a report published by the cybersecurity organization Security Alliance (SEAL) describing over 60 imposters linked to North Korean operations. The report states that these attackers created fake LinkedIn profiles, set up GitHub portfolios, and used forged government IDs to make their applications appear authentic. A shift in methods: North Korean hackers have been a major threat to the cryptocurrency industry, stealing over $1.3 billion in assets in 2024 alone. Traditionally, they have relied on phishing, malware, and compromised private keys to siphon funds from exchanges. However, recent reports indicate that they are shifting to targeting human resources. An independent investigation by ZachXBT also revealed how a small DPRK-affiliated team of five IT staff operated over 30 fake identities at cryptocurrency companies. Coinbase also recently reported similar threats from these bad actors. The exchange stated that its remote workforce policy is increasingly being targeted to infiltrate sensitive systems. CEO Brian Armstrong subsequently announced changes to the company's internal security protocols, including mandatory in-person onboarding in the United States, fingerprinting, and a US citizenship requirement for employees with system-level access. The exchange has also introduced stricter interview procedures, such as requiring cameras to remain on to prevent impersonation and AI-assisted coaching. In light of the growing threats facing the job market, CZ urged cryptocurrency platforms to train employees not to download files and to carefully screen potential candidates.