tech
January 30, 2026
Fireblocks CEO says North Korea-linked job recruitment scam targeted LinkedIn profiles
CEO Michael Shaulov said hackers, especially those with ties to North Korea, have been evolving at "lightspeed" because of AI.

TL;DR
- Fireblocks identified and disrupted a North Korea-linked job recruitment scam using LinkedIn.
- Hackers impersonated Fireblocks recruiters, conducting fake interviews and sharing assignments via GitHub.
- The scam aimed to compromise developers and gain access to crypto infrastructure by installing malware.
- Malware was installed when candidates ran routine installations, potentially exposing wallets, keys, and production systems.
- The hackers targeted engineers with privileged access based on their LinkedIn profiles.
- Fireblocks collected evidence of the tools and malware used by the hackers.
- Fireblocks collaborated with LinkedIn and law enforcement to remove fake profiles.
- LinkedIn stated that over 99% of fake accounts are proactively detected.
- The hackers' methods have become significantly more sophisticated, resembling legitimate interactions.
- This follows previous large-scale crypto heists linked to North Korea's Lazarus Group.
Continue reading the original article