#state-sponsored News & Analysis

5 articles tagged with #state-sponsored. AI-curated summaries with sentiment analysis and key takeaways from 50+ sources.

AI × CryptoBearishCoinTelegraph · Apr 15🔥 8/10

🤖

North Korean hackers used AI-enabled social engineering in Zerion attack

North Korean hackers executed a sophisticated attack on Zerion using AI-enabled social engineering tactics, marking the second major long-term social engineering campaign this month following the $280 million Drift Protocol exploit. The incident demonstrates how threat actors are leveraging artificial intelligence to enhance the effectiveness and scale of credential compromise attacks against cryptocurrency platforms.

CryptoBearishCoinDesk · Apr 12🔥 8/10

⛓️

Why North Korea keeps stealing billions in crypto — out in the open

North Korea's cryptocurrency theft operations have evolved into a sophisticated, state-sponsored threat that operates with relative impunity despite international scrutiny. Security experts warn that the regime's unique position as a nation-state with fewer geopolitical constraints makes it fundamentally different from other cybercriminals, posing an escalating risk to crypto ecosystem security and stability.

DeFiBearishCoinDesk · Apr 5🔥 8/10

💎

Drift says $270 million exploit was a six-month North Korean intelligence operation

Drift exchange suffered a $270 million exploit orchestrated by North Korean intelligence operatives who conducted a sophisticated six-month social engineering campaign. The attackers posed as a legitimate trading firm, met Drift team members in person across multiple countries, and deposited $1 million of their own funds to establish credibility before executing the massive drain.

DeFiBearishBlockonomi · Apr 5🔥 8/10

💎

Drift Protocol Hack: How a North Korean Group Spent Six Months Infiltrating a DeFi Protocol

Drift Protocol suspended all operations after a sophisticated six-month infiltration by a North Korean state-backed group culminating in an exploit on April 1, 2026. The attackers posed as a legitimate trading firm, conducted in-person meetings across multiple countries, and used three attack vectors including a silent code execution flaw in development tools.

CryptoBearishThe Block · Mar 176/10

⛓️

Crypto e-commerce firm Bitrefill discloses cyberattack, names North Korea’s Lazarus Group as potential suspect

Crypto e-commerce platform Bitrefill disclosed a cyberattack that compromised 18,500 customer purchase records, potentially exposing limited customer information. The company suspects North Korea's Lazarus Group may be responsible for the security breach.