Ripple Shares Intelligence On North Korean Threats As Attack Tactics Evolve

Ripple is working together with others to address one of crypto’s biggest threats: state-backed hacking groups. The company has started sharing its internal information about North Korean cyber attackers with the wider industry through a joint effort with Crypto ISAC.

This shows a change in attack methods. Instead of targeting smart contract flaws, attackers are now focusing more on people. Recently, some have joined crypto companies as fake job applicants, gained trust, and then used malware to steal important information.

This approach makes regular security tools much less effective. When attackers are inside a company, automated systems often miss the warning signs. Ripple’s shared information is meant to help companies spot suspicious patterns in hiring and internal messages.

The threat is serious. Well-known groups like Lazarus have caused losses of hundreds of millions of dollars, with several attacks happening in a short period.

By sharing information such as email patterns, digital identities, and behavioural indicators, Ripple aims to help the entire industry better defend itself. The goal is that if one company finds a threat, others can respond before it spreads.

It is still unclear if this approach will slow down advanced state-backed attackers. However, it does show a move toward working together on security, which is important since individual defences have often failed.

You need to login in order to Like