Profile
Also known as: Jade Sleet, Pukchong, UNC4899
TraderTraitor targets blockchain companies through spear-phishing messages. The group sends these messages to employees, particularly those in system administration or software development roles, on various communication platforms, intended to gain access to these start-up and high-tech companies. TraderTraitor may be the work of operators previously responsible for APT38 activity.
Related profiles: Lazarus Group
Profiles whose description names this actor, that this description names, or that share one of its names. The sources mention them together; they are not necessarily the same group.
ATT&CK techniques
MITRE ATT&CK has no technique mapping for this actor.
Incidents attributed
In the news · last mention Nov 11
- Binance refutes 'pay or leak' blackmail post... claims of selling 335 million users' information likely a scam KO
- Pyongyang denies Binance hack, but its own spy disagrees
- FBI-wanted N. Korean hacker back in spotlight
- [Issue Column] 8.4 Trillion Won Stolen Despite Knowing: The Oldest Vulnerability in Security, 'People' KO
- Binance says fake job interviews, AI tool used in $6 bln theft blamed on N. Korea
- North Korea warns of stronger response to US ‘hostility’
- General Kim does no bad things? Binance stolen 200 billion crypto assets, North Korea pointed as black hand, Kim Yo-jong angrily refutes ZH
- Pyongyang slams FBI claims linking it to Binance heist amid missile launch
- N. Korea slams FBI allegations over Binance hack as ‘grave’ provocation
- North Korea slams FBI allegations over Binance hack as 'grave' provocation
- Binance clients pull US$4.7bil after hack as crypto world studies fallout
- North Korea’s hackers supercharge crypto heists with AI skills
- Nearly $4.65 billion withdrawn in 9.5 hours! Binance faces 'exodus' after hacker incident ZH
- Over $6 billion in cryptocurrency stolen in 20 minutes! North Korean hackers suspected of romance scam to infiltrate Binance engineers; Trump says this... ZH
- Binance faces withdrawal wave after hack! $3.6 billion net outflow in less than 10 hours; Changpeng Zhao urgently speaks out ZH
- Binance resumes withdrawals after more than US$6bil stolen in hack
- FBI says North Korea behind US$6bil crypto theft from Binance
- Binance recovers 95% of stolen assets, announces phased resumption of withdrawals ZH
- North Korean cyberterrorism gains renewed scrutiny after record Binance heist
- Binance’s US$6b crypto heist: Five things to know about North Korea’s TraderTraitor hackers
- Binance robbed of 6.3 billion USD by North Korean hackers! Rushes to replenish 90% of assets, promises to fully compensate user losses ZH
- FBI blames North Korea for stolen billions from Binance in biggest hack in history
- Binance says it has covered 90% of losses from $6.3 billion hack
- Biggest theft in history! North Korean hackers use 'this trick' to steal 6.3 billion from Binance; executives shocked: There is more than one entry point ZH
- N. Korean hackers blamed for record $6.3b Binance cryptocurrency theft: US firm
Targets
No victim countries in the sources.
Relevance to the EU
EU relevance: Low
No EU member state among its known victims and no overlap with EU projects
No EU cooperation projects recorded in its target countries.