Leaderboard
93All-time rank
C

CoinsPaid

Jul 22, 2023

$37.3M
Lost
$37.3M
Recovered
$0
Net loss
$37.3M
Unrecovered0% recovered

3M from CoinsPaid via a 6-month social engineering campaign posing as recruiters. Attackers conducted fake job interviews and tricked an employee into installing JumpCloud Agent malware on their laptop, gaining access to operational systems and wallets.

Target
Other
Classification
Social Engineering
Technique
Impersonation Scam
Attribution
North Korea
Chains

Event timeline

  1. Jul 22, 2023
    Exploit executed — $37.3M drained via impersonation scam
  2. Attributed to North Korea
  3. Recovery status Unrecovered 0%

Data credits

Related incidents