Connect with us

Crypto

North Korean-Linked Hackers Are Targeting Crypto Platforms More But Stealing Less

Published

on

North Korean-Linked Hackers Are Targeting Crypto Platforms More But Stealing Less

The number of North Korean-linked hacks of cryptocurrency platforms rose to a record high in 2023, though the actual amount of funds stolen dropped around 40%, a report Wednesday from blockchain analysis firm Chainalysis Inc. showed.

In a series of 20 hacks throughout the year, cybercriminals linked to the Democratic People’s Republic of Korea siphoned slightly more than $1 billion worth of cryptocurrency, compared to $1.7 billion in 2022. North Korean hackers often target cryptocurrency to raise money as a way around international sanctions, according to US officials.

The drop in funds stolen by North Korean hackers mirrors a larger trend in the cryptocurrency security landscape: an overall decline in hacks of the once-lucrative decentralized finance, or DeFi, protocols. In 2023, the total amount stolen from DeFi protocols was $1.1 billion, a 64% decrease from the $3.1 billion pilfered in 2022, according to Chainalysis.

“There have been some positive aspects that have started to slow their success in making off with hundreds of millions of dollars in one attack,” said Erin Plante, vice president of investigations at Chainalysis. “But the threat’s not going away by any means.”

Over the past few years, DeFi protocols have been increasingly targeted by hackers because their source code is freely available online, allowing criminals to more easily find bugs to exploit.

Advertisement

Better security practices, coupled with an overall decrease in DeFi activity, were most likely behind the decline in funds stolen in 2023, Chainalysis said. More DeFi applications are improving their code auditing and receiving guidance from companies like Microsoft Corp. and Alphabet Inc.’s Google on how to strengthen their networks, according to Plante.

As cryptocurrency platforms fortify their networks, North Korean hackers are racing to keep up by employing more diverse and sophisticated tactics, Plante said. More criminals are waiting patiently for an opportunity to strike by accessing networks undetected and sometimes gathering intelligence for months.

“They look at what’s changing, what’s evolving, and how they can use that malicious intent,” said Joe Dobson, principal analyst at the cybersecurity firm Mandiant. “Whatever the advancement is, they’re going to find a way to take advantage of it.”

In one stealthy hack this past June, TraderTraitor, a group with ties to North Korea, swiped around $129 million from thousands of users on cryptocurrency wallet service Atomic Wallet, according to Chainalysis. The group worked by chain-hopping, moving between different cryptocurrencies quickly to avoid being traced. They went on to hit two other crypto payment platforms, Alphapo and CoinsPaid, later that month, according to the report. Atomic Wallet said in a statement at the time that less than .1% of app users had been affected.

Investor behavior in the volatile cryptocurrency markets could be another underlying reason North Korean-linked hackers are stealing less. Fueled by the collapse of FTX Trading Ltd. and the vulnerability of these companies to large hacks, investors may be diversifying their currency among many platforms to avoid risk, according to Allan Liska, senior intelligence analyst at cybersecurity firm Recorded Future Inc. This means cryptocurrency exchanges may have a smaller pool of funds for hackers to steal.

Advertisement

“There’s less trust in many of the traditional big exchanges than there used to be,” Liska said.

Photo: Photographer: Paul Yeung/Bloomberg

Copyright 2024 Bloomberg.

Topics
Cyber
Fraud

Advertisement

Interested in Cyber?

Get automatic alerts for this topic.

Crypto

Peter Schiff: Silver Is Running Out — Buy Now Before There’s Nothing Left

Published

on

Peter Schiff: Silver Is Running Out — Buy Now Before There’s Nothing Left
Silver’s surge to record highs is flashing urgent warnings about collapsing supply, mispriced mining stocks, and eroding currency confidence, with mounting volatility risks as prices race toward triple digits, economist Peter Schiff says.
Continue Reading

Crypto

Judge Issues Arrest Warrant for Quebec Cryptocurrency Business Owner in FACTOR Canada Cybertheft Case

Published

on

Judge Issues Arrest Warrant for Quebec Cryptocurrency Business Owner in FACTOR Canada Cybertheft Case

There has been a major development in the FACTOR Canada cybertheft case.

The Ontario Superior Court of Justice has issued an arrest warrant for Quebec man James Campagna, found in contempt of court after nearly $10 million in music grant funds went missing.


In July 2024, it was reported that $9.8 million was allegedly stolen from the Canadian music non-profit and granting body’s Scotiabank account. In court last Friday (Jan. 9), where Billboard Canada was present, Justice W.D. Black of the Ontario Superior Court of Justice ruled that he will endorse a warrant for business owner James Campagna, sentencing him to 30 days in jail.

“I find that Mr. Campagna is a liar, a fraud, and a scofflaw, deliberately and knowingly breaching this court’s orders,” wrote Justice Black in a bombshell Commercial List endorsement dated Jan. 9.

According to court documents, Campagna is the sole shareholder of Vipera, a Quebec-based tech company. The document claims that money was transferred in the form of a counterfeit invoice from FACTOR to Vipera’s Scotiabank account by Campagna, who moved the money into an account owned by cryptocurrency platform VirgoCX Direct.

Advertisement

The funds were transferred out mere days after the Department of Canadian Heritage deposited $14.3-million to distribute to the music industry.

After the case became public, FACTOR released a public statement, claiming that Campagna gained access to the bank account from an IP address that had never previously accessed their banking info. Additionally, the organization noted that it was never flagged about the “highly unusual, suspicious, and illegal activity” by Scotiabank.

The case is one of — if not the biggest — theft cases in the history of the Canadian music industry. Nearly two years into the legal battle, FACTOR’s lawyers have consistently requested that Campagna be held in contempt of court — now it’s finally happening, a rarity in the Commercial List court.

In Friday’s filing, Justice Black writes that “Mr. Campagna has knowingly and intentionally disregarded and/or failed to comply with various orders of this court” including producing documents, correspondence, corporate financial statements and banking information.” Justice Black writes that Campagna has made various excuses to avoid participating, in what he calls “a frustrating ‘the dog ate my homework’ approach to his obligations.”

“Mr. Campagna has lied about various aspects of his conduct and activities in relation to the fraudulent transfer,” he writes. “It is highly likely that he was a knowing and active participant in the fraud, and that he has benefitted and continues to benefit from the proceeds of that fraud.”

Advertisement

According to “FACTOR’s investigations and surveillance,” Campagna has now “fled jurisdiction,” Justice Black reports, and moved to Qatar. That’s according to evidence including social media posts indicating he plans to “stay and work in Qatar for a year” and documents that show his four children have been enrolled in school in the country.

In his endorsement, Justice Black recognizes that Campagna “has taken active steps with a view to putting himself beyond the reach of the court.” Still, “there should therefore be plenty of time, once my order comes to his attention, within which Mr. Campagna can take steps to purge his contempt.”

In a statement to Billboard Canada, FACTOR Canada CEO Meg Symsyk says the ruling is an important development as the organization pursues the repayment of the missing money.

“FACTOR welcomed Justice Black’s ruling this past Friday, which reaffirms what we maintained since the outset: the perpetrators of this theft have not been held to account,’ she says. “The finding of contempt against Mr. James Campagna clearly illustrates the challenges that FACTOR has encountered in working to recover the stolen funds. FACTOR will continue to pursue all available legal avenues to recover these public monies and clear the organization and its staff.”

Scotiabank tells Billboard Canada that they cannot comment, given that the matter is before the courts.

Advertisement

As the legal proceedings continue, the question of penalty and remedy remains open-ended. FACTOR has made its stance clear, as they hope to recoup the almost $10 million in lost funds. In addition to seeking contempt from Campagna, the non-profit is putting legal pressure on Scotiabank, which they said in 2024 has “participated reluctantly, and in the most limited fashion” during the initial investigations.

FACTOR has said that Scotiabank “has acknowledged it has never reported this financial crime to law enforcement” and that despite an issued money transfer of $9,772,875.33, over 300 times larger than any previously made from the account, there were “no alerts to FACTOR of this highly unusual, suspicious, and illegal activity.”

FACTOR is one of the country’s most significant investors in the development, financing and support of Canadian music. Many in the music industry have been watching this case carefully.

Continue Reading

Crypto

Strategist Warns Crypto Oversupply Could Force $10K Bitcoin Reset

Published

on

Strategist Warns Crypto Oversupply Could Force K Bitcoin Reset
Bitcoin’s explosive rally may have gone too far, with oversupply, rising volatility risk, and shifting macro forces setting the stage for a major reset that could redefine crypto’s next cycle, according to a Bloomberg Intelligence outlook.
Continue Reading
Advertisement

Trending