Ctrl-Alt-Intel Reports Suspected North Korean Cyberattack Targeting Crypto Infrastructure

Ctrl-Alt-Intel Reports Suspected North Korean Cyberattack Targeting Crypto Infrastructure

Hackers linked to North Korea exploited website vulnerabilities on June 2 to infiltrate multiple crypto firms, focusing on staking service providers, though no direct asset losses have been confirmed.

Fact Check
The core of the claim is highly accurate and corroborated by multiple reputable crypto news outlets (BlockBeats, CoinPost) and the official research entity (Ctrl-Alt-Intel). The report describes a sophisticated attack by North Korean actors using the React2Shell vulnerability to target staking platforms and supply chain providers like ChainUp. The only minor discrepancy is the date 'June 2' in the user's prompt, which appears to be a typo for 'March 2' (03/02), as the report and the vulnerability (CVE-2025-55182) are associated with late 2025 and early 2026.
    Reference123
Summary

Security firm Ctrl-Alt-Intel reported that on June 2, hackers associated with North Korea targeted several cryptocurrency companies by exploiting vulnerabilities in their websites, specifically affecting staking service providers. While the attack successfully infiltrated systems, no direct cryptocurrency losses have been verified.

Terms & Concepts
  • Staking: A process where cryptocurrency holders lock their assets to support network operations and earn rewards.