ZachXBT Uncovers North Korean IT Workers’ $680K Hack
Leaked data reveals North Korean hackers used 31 fake identities to steal $680K from fan-token platform Favrr.
- 31 fake identities linked to North Korean hackers uncovered
- $680K stolen from fan-token platform Favrr
- ZachXBT exposes operation using leaked documents
In a recent exposé, on-chain sleuth ZachXBT revealed explosive details about North Korean IT workers running a cybercrime operation under the radar. According to the leaked documents he shared, the group used 31 fake freelance identities to infiltrate and steal funds from the fan-token marketplace Favrr, resulting in a loss of $680,000.
This operation is part of a larger pattern of cyber activities reportedly orchestrated by North Korean operatives to fund their nation’s regime. These findings add another layer to the growing concern around state-sponsored hacking groups targeting the crypto space.
Inside the 31 Fake Profiles Scam
The exposed data suggests that these IT workers posed as remote freelancers, cleverly building trustworthy profiles on platforms where Favrr hires its tech talent. Through these deceptive identities, they managed to access critical systems and execute the theft.
Many of these profiles were backed by stolen personal information, with fake resumes and fabricated work histories. They communicated professionally, sometimes even using Western aliases to avoid suspicion. Once inside Favrr’s system, they manipulated internal operations, bypassed checks, and withdrew large sums of crypto assets.
ZachXBT’s findings show how organized and strategic these hacks have become — no longer just brute-force attacks, but calculated infiltrations with deep planning.
Growing Concerns Over State-Backed Cyber Threats
The Favrr incident is not isolated. It follows a disturbing trend of North Korean involvement in cybercrime across the crypto sector. According to the U.S. Treasury and cybersecurity analysts, such operations fund everything from missile programs to the regime’s broader economic needs.
ZachXBT’s report serves as a wake-up call for crypto platforms relying on remote IT teams. Verification methods need to go beyond surface-level ID checks. As the crypto industry expands, so do the risks — and threats like these are only getting more sophisticated.
Read Also :
- Top Trending Crypto Highlights: PENGU on the Rise, ETH Price Stays Neutral, Cold Wallet $6M Presale
- PENGU Aims for a Breakout, Cosmos Pulls Back, and BlockDAG’s $373M Milestone with Dashboard V4 Takes Center Stage
- Metaplanet Becomes 6th Largest Bitcoin-Holding Company
- Brett Coin Price Prediction: Clawing Toward $0.1 While Arctic Pablo Blasts Off with 12,400% ROI
- BingX Exchange Earns PCI DSS v4.0.1 Certification
