North Korean hackers compromise 1,640 companies in 57 countries

North Korean hackers have managed to infiltrate 1,640 companies in 57 countries worldwide. That is the conclusion of cybersecurity researcher Vangelis Stykas, CTO of the company Kumio, after 22 months of access to the hackers’ command and control servers. In 700 to 800 organisations, it concerns serious breaches, in which attackers gained full access to servers, cloud platforms and crypto wallets.

In short:

• North Korean hackers compromise 1,640 companies through bogus recruitment processes
• 700 to 800 organisations suffered serious damage, including root access and access to crypto wallets
• Researcher Stykas presents his findings at the Black Hat security conference in Las Vegas

Access via fake job applications

According to Stykas, the North Korean hackers used fake vacancies and false job interviews to lure victims. Using this method, they managed to gain access to corporate networks worldwide. Stykas presents his findings today at the Black Hat security conference in Las Vegas, WIRED reports.

The researcher describes the access obtained as alarming. It concerns access at the highest level to servers, root rights within Amazon Web Services and, at crypto companies, keys and direct access to blockchains. Poor security at external suppliers significantly amplifies the impact of the attacks.

Focus on crypto theft

The research shows that the hackers are strongly focused on stealing cryptocurrencies. The attackers worked methodically, specifically targeting organisations where valuable digital assets can be obtained. The combination of advanced attack techniques and weak access controls at third parties makes the damage extensive.

North Korea has been known for years as one of the most active state-sponsored hackers in the crypto sector. Previously, groups such as the Lazarus Group were already linked to the theft of billions from crypto exchanges and DeFi protocols. Kumio’s new findings show that the attacks go broader and deeper than was previously known.