Yazılar

North Korean Hackers Using Fake Job Offers to Steal Cryptocurrency, Research Shows

North Korean hackers are increasingly impersonating recruiters to steal cryptocurrency, saturating the industry with convincing fake job offers, according to new research and interviews conducted by Reuters. The cyber campaign, dubbed “Contagious Interview” by cybersecurity firms, has grown so pervasive that many applicants now screen recruiters to ensure they are not acting on behalf of Pyongyang.

Experts say North Korea stole at least $1.34 billion in cryptocurrency last year, funding its sanctioned weapons program. The FBI has previously warned that Pyongyang was “aggressively” targeting the crypto industry with elaborate social engineering schemes.

The scams typically begin on LinkedIn or Telegram, with a recruiter offering a role at a major blockchain or crypto firm. Applicants are then directed to obscure websites to complete a skills test or record a video—sometimes requiring them to download malicious code. In one case, a U.S. product manager lost $1,000 in ether and Solana after sending a video to a fake recruiter impersonating Ripple Labs. Others, like consultant Ben Humbert, cut off conversations after being asked to complete “virtual interviews” through suspicious links.

Companies such as Robinhood and Kraken have acknowledged being impersonated. Robinhood said it acted to disable fake web domains linked to the scam. LinkedIn and Telegram confirmed that the fraudulent accounts identified by Reuters had been removed. Still, security experts say the impersonations are difficult to police, as “anybody out there can say they’re a recruiter,” noted Nick Percoco, Kraken’s chief security officer.

Research by SentinelOne and Validin found exposed hacker log files containing details of more than 230 targeted individuals—ranging from coders and consultants to executives—between January and March. Analysts linked the activity to North Korea based on IP addresses and emails tied to previous state-backed hacks.

Although only a fraction of North Korea’s overall crypto theft efforts, experts warn the campaign is highly organized and rapidly evolving. “It’s scary how far they’ve come,” said Carlos Yanez of Global Ledger, one of the recent targets.

North Korea’s mission to the United Nations did not respond to Reuters’ request for comment, though Pyongyang routinely denies involvement in cryptocurrency theft.

Ripple to Acquire Stablecoin Payments Platform Rail for $200 Million to Expand Market Leadership

Ripple announced plans to acquire Rail, a Toronto-based stablecoin payments platform, for $200 million in a deal expected to close in Q4 2025 pending regulatory approval. The acquisition aims to enhance Ripple’s stablecoin infrastructure and strengthen its position in cross-border stablecoin payments.

Rail, backed by Galaxy Ventures and Accomplice, facilitates cross-border payments using stablecoins, boasting faster settlement times and lower transaction costs compared to traditional fiat payments. Rail currently processes around 10% of global stablecoin payment volume.

Ripple, closely associated with the XRP token and its own stablecoin RLUSD, highlighted that integrating Rail’s technology will bring virtual accounts and automated back-office operations to its payment solutions. Monica Long, Ripple’s president, emphasized that clearer regulations and market maturity have created ripe conditions for growth in stablecoin payments.

This move follows a recent U.S. law signed by President Donald Trump establishing a federal regulatory framework for stablecoins, potentially accelerating mainstream adoption of digital assets for everyday payments.

Ripple also disclosed an earlier acquisition plan for Hidden Road, a multi-asset prime broker, in a $1.25 billion deal intended to boost RLUSD’s utility.

RLUSD, launched last year, currently has a market cap exceeding $611 million, competing with dominant stablecoins like Tether and Circle’s USDC.

Ripple Applies for U.S. National Bank Charter to Advance Crypto Integration

Crypto firm Ripple has submitted an application for a U.S. national bank charter, aiming to deepen its integration with the traditional financial system and gain regulatory clarity, CEO Brad Garlinghouse announced on Wednesday. This move follows a similar step by stablecoin issuer Circle, signaling growing momentum among crypto firms to enter the regulated banking space.

Obtaining a national charter from the Office of the Comptroller of the Currency (OCC) would enable Ripple to settle payments more quickly and at lower costs by reducing reliance on intermediary banks. The OCC confirmed receipt of Ripple’s application. Additionally, Ripple is seeking a Federal Reserve Master account to directly access the Fed’s payment infrastructure and hold stablecoin reserves with the central bank, as Garlinghouse detailed on social media.

Ripple’s stablecoin, RLUSD, launched in October 2024, currently holds a market value near $470 million, placing it among the larger stablecoins, though still smaller than dominant players like Tether and Circle’s USD Coin. The timing aligns with increased regulatory attention on stablecoins, particularly after the U.S. Senate passed the GENIUS Act, which industry experts say will foster safer adoption by clarifying regulations.

Circle also recently applied for a national trust bank charter shortly after its strong IPO, reflecting a broader industry push to legitimize and scale crypto payment systems through traditional finance channels.

Grayscale, a major digital asset manager, praised the GENIUS Act, stating it is likely to enhance stablecoin adoption in the U.S. while maintaining safeguards for consumers and financial stability.