
Ripple is sharing its internal intelligence on North Korean hackers with the Crypto ISAC to help crypto firms detect coordinated social engineering attacks. Recent breaches like the $285 million Drift hack involved long-term infiltration and malware, not smart contract bugs, allowing North Korean operatives to steal over $500 million in a month. This shift from technical exploits to human-based attacks challenges traditional security tools, prompting Ripple to share detailed profiles of suspected operatives to prevent repeated infiltration attempts. The Lazarus Group's involvement is also influencing legal actions over frozen crypto assets linked to these thefts, though it remains uncertain if intelligence sharing will effectively curb future attacks.