Threat Intelligence, Threat Hunting

Over $3M worth of crypto amassed by North Korean hackers

SecurityWeek reports that more than $3 million worth of cryptocurrency has been stolen by North Korean hackers collectively tracked as the Lazarus Group since its emergence in 2017. More than half of stolen cryptocurrency assets were from Lazarus Group's attacks against Ronin Network, Nomad, Harmony, Qubit Finance, and other organizations last year, when the threat operation began leveraging more advanced attack techniques, but Lazarus is expected to be most prolific this year, owing to its compromise of enterprise software firm JumpCloud and cryptocurrency heists against Atomic Wallet, CoinsPaid, CoinEx, Alphapo, and Stake.com, according to a report from Recorded Future. Such findings come after cryptocurrency mixers Sinbad, Tornado, and Blender were sanctioned by the U.S. government for their involvement in laundering cryptocurrency stolen by North Korean hackers. "North Korean threat actors also use the accounts and personal information of phishing victims to register verified accounts at trusted cryptocurrency exchanges where they can send the stolen cryptocurrency and cash out," said the study.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.