
Sadly probably just “scary foreigner” propaganda, but you can dream
Uncritical support to the Democratic People’s Republic of Korea in their unconfirmed heists
They have seized assets belonging to rogue state oligarchs, essentially
Yes I support the democrats.
And Republicans at the same time!
I do not support the republic of korea
DPRepublicK
Just watched the coffeezilla 10 minute explainer on this and I guess the logic is ‘it must be DPRK because no one else would have the audacity’ which I love for their reputation, but also is funny since his channel’s motto is ‘crime is legal now’ and has covered individual guys bashing each other with hammers for hundred million dollar crypto wallets
for real, a musician and his family were killed in mexico for a crypto wallet
I don’t believe this was the DPRK, sadly, but I actually love this form of propaganda for how ineffective it is.
-
It’s completely unactionable. What are they gonna do? Sanction North Korea?
-
Crypto bros are super unpopular and so this boosts the popularity of Free Korea.
Yeah there’s about zero evidence to truly believe it, but this being purported as true does make the above points funny as hell
-
https://cursor.com/blog/claude-code-extension-security-notice
They stole shitcoin from vibecoders. Whoever did it is a hero

EDIT: I regret saying anything, having these conversations is exhausting. AI is the real brainworms. Think for yourselves nerds.
It’s both.
EDIT: I regret saying anything, having these conversations is exhausting. AI is the real brainworms. Think for yourselves nerds.
No it’s not. I’ve met a lot of people in infosec and they are clear about both being an issue. AI bots are like a force-multiplier for certain tasks, and comparing huge code repositories against known avenues of attack is one of them. Even though AI isn’t “smart” or creative like a person, you can spin up a fleet of them to brute force something very quickly.
Yeah like the PHP vulnerability was something that was already known about, but was not thought to be exploitable.
Bots change the threat calculation. They’re not magic hacking machines, but they make new forms of attack possible.
Yeah php specifically had an entry in their security documentation that this kind of bug isnt considered to be security relevant.
EDIT: I regret saying anything, having these conversations is exhausting. AI is the real brainworms. Think for yourselves nerds.
that we wouldn’t’ve plausibly have seen without AI.
That’s not a reasonable criterion. With infinite amount of labor we can find all the bugs.
I was recently at a B-Sides event and I saw some researchers talk about it in a way that didn’t seem to me like “hype”. One example was a forensic analysis of a breach, that showed seconds between a file being accessed (industrial control manual), and their networked environmental systems being bricked. The chain of events suggested that the bot wasn’t initially targeting that system, but it was prompted to find something it could damage. Yes, AI is hype-train 9000, but people are using it. The amount of spam/phishing emails hitting our filters has tripled (or more in the last few weeks alone. Phone scammers are increasingly using AI bots. These are all leading to more security incidents.
With newer code sure but they are also finding old bugs like in PHP.
Projects on a of critical importance on a shoestring budget and suddenly now that corpos can spend money on security audits without paying workers they are willing to spend the money.
EDIT: I regret saying anything, having these conversations is exhausting. AI is the real brainworms. Think for yourselves nerds.
I mean PHP is just so bad. Node is worse but PHP is really up there. It should have died a decade ago but WordPress keeps it going.
It’s incredible accessible
I really don’t think so. Outside of lower level languages like C or rust everything is just memorizing a few incantations for most server languages. Main thing is that PHP (WordPress) actively gets you to change and deploy server code as a rando.
Main thing is that PHP (WordPress) actively gets you to change and deploy server code as a rando.
Yes that’s what I mean by accessible
That is a WordPress thing though. And it is a bad design decision that creates a myriad of vulnerabilities that constantly occur as the underlying framework is itself not robust enough to prevent catastrophic mistakes. This ends up making running a secure WordPress site that has the features everyone documents rely on hosting it on a cloud service rather than yourself, as they will automatically apply patches to work around these constantly-emerging vulnerabilities. Major CVE last with with RCE. If you host anything with even just PHP take the service down if it hasn’t been patched yet.
Anyone could do the same with a NodeJS CRM or something and make it just as accessible. PHP isn’t itself more accessible. It is just a bad design decision by WordPress that those using other languages choose not to replicate.
I’m just gonna start blaming North Korea for my mistakes at work. Oh sorry boss I actually can’t work today North Korea hacked my Internet. Oh sorry boss that document is late because North Korea hacked my laptop and deleted it. Oh sorry boss I didn’t respond to that email because North Korea marked it read before I saw it and it got buried
It’s amazing and super convenient that the source of all our failures are people in the bad countries
Damnit North Korea
Removed by mod
Or embezzlement
yeah my first thought upon seeing these headlines wasn’t “based juche heist” it was “standard crypto rug pull”
The way they crypto got moved around and converted immediately indicates having more of plan than I’d expect from a 15 year old. The attack itself, sure why not.
My guess is some devops guy got got by the Claude code backdoor.
Good? If I recall correctly Binance did something that harmed Palestinians; either Palestinians from Gaza/West Bank were blocked, or it was being used to raise funds to help Palestinians and they blocked that (DURING the genocide).
The DPRK is already based on Palestine, this would just make them cooler.
I mean hell yeah for sure. Just being crypto was bad enough in my eyes, no surprise if they’re also chuds
Someone has to fight the scourge of cryptocurrency and I can’t think of a better candidate lmao (with NK despite its faults being ultimately anti US imperialism). China also banned crypto so even less reason for NK not to go absolutely ham

Im happy the money is going to someone who deserves it

Sending energy straight to Pyongyang to make this actually true
i doff my cap to the rogues and scallywags who pulled this off 🎩
Remember the Wannacry ransomware? They were blaming the North Korean hackers too.












