North Korean hackers exploit third-country nationals to infiltrate US companies and acquire cryptocurrency.
North Korea leverages foreign technicians from Iran and Lebanon to infiltrate US companies through an "interview assistant" model, involving data theft and crypto asset theft. CrowdStrike data shows it caused over $2 billion in crypto losses last year.