From: https://shorturl.at/xQLbU (fbi.gov)

===
Washington, D.C.
FBI National Press Office
(202) 324-3691

December 23, 2024
FBI, DC3, and NPA Identification of North Korean Cyber Actors, Tracked as 
TraderTraitor, Responsible for Theft of $308 Million USD from Bitcoin.DMM.com

The Federal Bureau of Investigation, Department of Defense Cyber Crime Center, 
and National Police Agency of Japan are alerting the public to the theft of 
cryptocurrency worth $308 million U.S. dollars from the Japan-based 
cryptocurrency company DMM by North Korean cyber actors in May 2024. The theft 
is affiliated with TraderTraitor threat activity, which is also tracked as 
Jade Sleet, UNC4899, and Slow Pisces. TraderTraitor activity is often 
characterized by targeted social engineering directed at multiple employees of 
the same company simultaneously.

In late March 2024, a North Korean cyber actor, masquerading as a recruiter on 
LinkedIn, contacted an employee at Ginco, a Japan-based enterprise 
cryptocurrency wallet software company. The threat actor sent the target, who 
maintained access to Ginco's wallet management system, a URL linked to a 
malicious Python script under the guise of a pre-employment test located on a 
GitHub page. The victim copied the Python code to their personal GitHub page 
and was subsequently compromised.

After mid-May 2024, TraderTraitor actors exploited session cookie information 
to impersonate the compromised employee and successfully gained access to 
Ginco's unencrypted communications system. In late-May 2024, the actors likely 
used this access to manipulate a legitimate transaction request by a DMM 
employee, resulting in the loss of 4,502.9 BTC, worth $308 million at the time 
of the attack. The stolen funds ultimately moved to TraderTraitor-controlled 
wallets.

The FBI, National Police Agency of Japan, and other U.S. government and 
international partners will continue to expose and combat North Korea's use of 
illicit activities--including cybercrime and cryptocurrency theft--to generate 
revenue for the regime.
===

... Clean mind, clean body: take your pick.
--- GoldED+/LNX 1.1.5-b20240209
 * Origin: Outpost BBS * Johnson City, TN (618:618/1)