Researcher infiltrates North Korean hacking servers for nearly 2 years

A Greek security researcher spent about 22 months infiltrating servers used by a North Korean hacking group and monitoring its activities, confirming that 1,640 organizations, including Coinbase and Uniswap Labs, had been targeted, according to BeInCrypto. Among the 1,640 organizations, about 700 to 800 were found to be seriously compromised, with the hackers having obtained access to server root privileges, AWS root accounts and cryptocurrency wallet keys, BeInCrypto reported. The researcher said the notable point was that although the North Korean hackers had access to medical records and criminal databases, they barely touched them and instead focused on cryptocurrency wallets and blockchain access rights. The researcher added that warning messages were sent to Coinbase and Uniswap Labs, which were known to have responded.