Hack, Hire, Steal: How North Korean Scammers Exploit Job Seekers for Crypto Theft

The 420 Team
3 Min Read


Follow us on Google News


Follow The420.in on Google News

North Korean hackers have launched a sophisticated cybercrime campaign targeting the cryptocurrency sector, luring victims with fake job offers and stealing access to their digital wallets. Cybersecurity firms have named the operation “Contagious Interview.

How the Scam Works

Hackers pose as recruiters on platforms like LinkedIn and Telegram, offering lucrative roles at well-known crypto firms. Victims are asked to attend virtual interviews through obscure websites or download malicious software disguised as skill tests. Once installed, the malware secretly grants hackers access to cryptocurrency holdings.

https://the420.in/final-call-fcrf-cdpo-course-dpdpa-act-ready-data-protection-officer/

One job applicant shared how he was persuaded to record a video using software provided by a supposed recruiter from Ripple Labs, only to later discover that $1,000 (₹88,400) in Ether and Solana had been stolen from his wallet. Another narrowly avoided theft after becoming suspicious of a recruiter impersonating staff from Kraken Exchange.

Scale and Impact

Investigations by cybersecurity companies SentinelOne and Validin have traced the campaign to North Korean actors. The country is believed to have stolen more than $1.34 billion (₹11,100 crore) in cryptocurrency globally last year. Experts warn that these operations contribute directly to Pyongyang’s strategy of funding its sanctioned weapons programs.

Targets of this scam include coders, executives, consultants, and marketers—many of whom receive personalized and convincing job approaches.

Government and Industry Response

To tackle such cyber fraud, India’s Department of Telecommunications (DoT) has blocked 3–4 lakh SIM cards linked to scams. Using AI-powered systems, DoT tracks suspicious activity and disconnects fraudulent numbers daily. The Indian Cyber Crime Coordination Centre (I4C) has also issued warnings, urging the public to stay alert against fake calls about eSIM activation, phishing links, or fraudulent OTP requests.

Authorities recommend reporting suspicious activity via the Cyber Crime Helpline (1930) or the official online portal.

Rising Threats

Industry experts caution that North Korean hackers are becoming more skilled at impersonating recruiters, making scams harder to detect. As the scale of theft grows, experts emphasize the need for vigilance, stronger global cooperation, and better awareness to safeguard digital assets from evolving threats.