
Ripple has started sharing internal threat intelligence on North Korean crypto hackers with the broader crypto industry to combat insider attacks. This shift addresses a new trend where hackers, notably North Korean groups like Lazarus, infiltrate organizations through social engineering rather than exploiting technical flaws. Recent hacks, including the $285 million Drift exploit, involved attackers gaining trust and access from within, bypassing traditional security. Ripple's collaboration with Crypto ISAC aims to help firms detect suspicious insiders by sharing detailed data, but the evolving tactics of hackers mean ongoing vigilance is needed.