North Korean Hackers Linked to Crowdfunding Scam

Summary: Recent investigations by Secureworks Counter Threat Unit (CTU) have revealed connections between North Korean IT worker schemes and a 2016 crowdfunding scam linked to the NICKEL TAPESTRY threat group. The research highlights how front companies facilitated the employment of North Korean IT workers, channeling illicit revenue back to North Korea. Additionally, a 2016 IndieGoGo campaign for a portable wireless memory device was identified as a scam, further illustrating the group’s diverse money-making tactics.

Threat Actor: NICKEL TAPESTRY | NICKEL TAPESTRY
Victim: Crowdfunding backers | IndieGoGo Kratos memory device

Keypoints :

• CTU researchers linked North Korean IT worker schemes to a 2016 crowdfunding scam.
• Two companies, Yanbian Silverstar and Volasys Silver Star, were designated for violating sanctions and facilitating North Korean IT employment.
• The IndieGoGo campaign raised approximately $20,000 but resulted in no products or refunds for backers, indicating a scam.