North Korean Hackers Target Solana Projects

North Korean Cyber Operations Target European Blockchain Projects

• North Korean IT workers have infiltrated crypto projects in the UK, Germany, Portugal, and Serbia.
• They pose as remote developers, compromising data and extorting companies.
• Projects affected include blockchain marketplaces and AI web apps using Solana and Anchor/Rust smart contracts.
• Workers used fake identities with degrees from Belgrade University and false residency documents from Slovakia.
• Payments are funneled through TransferWise, Payoneer, and cryptocurrencies to evade detection.
• The U.S. Treasury sanctioned two Chinese nationals for laundering assets to fund North Korea’s government.

Google’s Threat Intelligence Group reports that North Korean cyber operatives have expanded their operations into Europe, targeting blockchain startups by posing as remote developers. These activities involve data theft and extortion attempts, with payments hidden via financial platforms to support the North Korean regime.