{
  "id": 643959,
  "title": "Inside the fake crypto startup that fooled North Korean IT workers",
  "url": "https://urgent.news/2026/08/12/inside-the-fake-crypto-startup-that-fooled-north-korean-it-workers",
  "topic": "finance",
  "section": "Finance & Markets",
  "published": "2026-08-12T07:34:58.000Z",
  "source": {
    "name": "Cointelegraph",
    "slug": "cointelegraph",
    "url": "https://cointelegraph.com/magazine/fake-crypto-startup-fooled-north-korean-it-workers"
  },
  "original_language": "en",
  "account": "A fake crypto startup named Ballena Azul deceived suspected North Korean IT workers into believing they were seeking venture capital funding. Cybersecurity firms Mauro Eldritch and Heiner García set up the ruse to gather intelligence on the workers' methods and infrastructure. Eldritch played the role of Leonardo Nelson, while García took on the identity of Andy Jones. The operation lasted five weeks and exposed valuable intel, including servers associated with malware families linked to North Korean campaigns. The workers relied on AI tools like ChatGPT and Google Gemini to compensate for their technical knowledge gaps. North Korean IT workers have increasingly posed a cybersecurity threat to the cryptocurrency industry, with some generating nearly $800 million in 2024 to fund North Korea's weapons of mass destruction programs.",
  "summary": "Suspected North Koreans IT workers joined a fake crypto startup — without realizing their every move was being tracked to extract valuable intel.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}