TraderTraitor activity is often characterized by targeted social engineering directed at multiple employees of the same company simultaneously.
The FBI, DC3 and Japan's National Police Agency said in their DMM notice that TraderTraitor activity is often characterized by targeted social engineering directed at multiple employees of the same company simultaneously.
This line is our short summary of the quote below. The quote is the evidence.
Other statements from the same source
The FBI, DC3 and Japan's National Police Agency said the actors likely used their access in late May 2024 to manipulate a legitimate transaction request by a DMM employee, resulting in the loss of 4,502.9 BTC worth $308 million at the time.
In late-May 2024, the actors likely used this access to manipulate a legitimate transaction request by a DMM employee, resulting in the loss of 4,502.9 BTC, worth $308 million at the time of the attack.
The FBI said that after mid-May 2024 TraderTraitor actors exploited session cookie information to impersonate the compromised employee.
After mid-May 2024, TraderTraitor actors exploited session cookie information to impersonate the compromised employee
The FBI, DC3 and Japan's National Police Agency said a North Korean cyber actor posing as a LinkedIn recruiter contacted an employee of Ginco, a Japan-based wallet software company, in late March 2024.
In late March 2024, a North Korean cyber actor, masquerading as a recruiter on LinkedIn, contacted an employee at Ginco, a Japan-based enterprise cryptocurrency wallet software company.
The FBI, the Department of Defense Cyber Crime Center and Japan's National Police Agency said on 23 December 2024 that the May 2024 theft of $308 million from DMM was by North Korean cyber actors and is affiliated with TraderTraitor threat activity.
The Federal Bureau of Investigation, Department of Defense Cyber Crime Center, and National Police Agency of Japan are alerting the public to the theft of cryptocurrency worth $308 million U.S. dollars from the Japan-based cryptocurrency company DMM by North Korean cyber actors in May 2024. The theft is affiliated with TraderTraitor threat activity, which is also tracked as Jade Sleet, UNC4899, and Slow Pisces.