Axie Infinity

Tornado

<div class="textg" style="text-align: justify; font-weight: lighter; line-height: 1.3em; font-size: 15px; border-radius: 3px; color: #80909a; padding: 10px; background-color: #F4F6F9; margin-bottom: 15px;">
 Neither the author, Tim Fries, nor this website, The Tokenist, provide financial advice. Please consult our&nbsp;<a href="https://tokenist.com/terms-of-service/" style="text-decoration:underline;color:#3c7b7b" target="_blank" rel="noopener noreferrer nofollow">website policy</a>&nbsp;prior to making financial decisions.
</div>
<p>According to the South Korean police, <a href="https://en.yna.co.kr/view/AEN20230418005300315" target="_blank" rel="noopener noreferrer nofollow">Lazarus Group attempted</a> to hack more than 200 computers belonging to 61 South Korean institutions last year through the so-called “watering hole” attack. However, the cybercrime organization did not cause any damage as the South Korean police managed to identify Lazarus’s activity and block the attempts.</p>
<h3 id="lazarus-attacked-over-200-computers-belonging-to-61-s-korean-institutions">Lazarus Attacked Over 200 Computers Belonging to 61 S. Korean Institutions</h3>
<p>Lazarus, one of the most prominent crypto cybercrime groups based in North Korea, launched cyber attacks on hundreds of computers belonging to 61 institutions from South Korea in 2022, according to Yonhap News, citing a police report. The National Police Agency (NPA) said that since June 2022, Lazarus hacked 207 computers belonging to these institutions, including eight media companies.</p>
<p>The computers were compromised through a “watering hole” attack that targeted security software installed. According to the NPA, to prepare for the hack, Lazarus first attacked a South Korean firm that distributes security software that is typically used for installing security plug-ins for online banking and financial services. This software is estimated to be installed on more than 10 million computers in South Korea.</p>
<p>The NPA also said that Lazarus had a predetermined plan in 2021 to infiltrate INISAFE – the firm that develops security software. The well-known hacking group reportedly studied the software’s flaws in recent years to build malware, but the police managed to spot the group’s activity on South Korean networks and cooperated with other agencies to preemptively block Lazarus’s further access. The NPA said that the attempts caused no actual damage.</p>
<div class="cta-referral">
 <img src="https://tokenist.com/wp-content/themes/thetokenist/assets/img/del/cta-referral-1.png" alt="" loading="lazy">
 <div class="cta-referral__text">
  <p>Join our&nbsp;<a href="https://t.me/thetokenist" target="_blank" rel="noopener noreferrer nofollow">Telegram group</a>&nbsp;and never miss a breaking digital asset story.</p>
 </div>
</div>
<h3 id="what-is-the-lazarus-group">What is the Lazarus Group?</h3>
<p>Lazarus Group is a cybercrime organization believed to be run by the North Korean government. It is best known for <a href="https://tokenist.com/north-korean-connection-to-ronin-hack-emerges-1b-stolen-in-2-years-so-far/" rel="noopener noreferrer nofollow">stealing a whopping $620 million</a> from a non-fungible token (NFT) game, Axie Infinity, in the biggest-ever crypto hack.</p>
<p>Reports from last year revealed that funds stolen in the Axie Infinity hack were moved through Tornado Cash, one of the most popular crypto mixers. Tornado <a href="https://tokenist.com/tornado-cash-sanctioned-by-the-us-would-prohibition-work-on-defi/" rel="noopener noreferrer nofollow">was sanctioned</a> by the US Treasury Department in August 2022 after becoming one of crypto hackers’ favorite toys.</p>
<p>Lazarus has been accused of numerous other major cyber-attacks recently, including the WannaCry 2.0 ransomware attack in 2017, the Bangladesh bank heist in 2016, and the Sony Pictures Entertainment hack in 2014. In 2020, the group <a href="https://blog.chainalysis.com/reports/kucoin-hack-2020-defi-uniswap/" target="_blank" rel="noopener noreferrer nofollow">stole $275 million</a> from the crypto exchange KuCoin. The group <a href="https://tokenist.com/north-korean-hackers-extracted-400m-worth-of-digital-assets-in-2021/" rel="noopener noreferrer nofollow">snatched more than $400 million</a> worth of crypto funds in 2021 alone.</p>
<div class="cta-sub js__cta-sub">
 <div class="cta-sub__start">
  <div class="cta-sub__title">
   <strong>Finance is changing.</strong>
  </div>
  <div class="cta-sub__subtitle">
   Learn how, with Five Minute Finance.
  </div>
  <div class="cta-sub__excerpt">
   A weekly newsletter that covers the big trends in FinTech and Decentralized Finance.
  </div> Try it out (for free)
 </div>
 <div class="cta-sub__form" style="display: none;">
 </div>
 <div class="cta-sub__result" style="display: none;">
  <div class="cta-sub__title">
   Awesome
  </div>
  <div class="cta-sub__caption">
   You’ve subscribed.
  </div>
  <div class="cta-sub__greeting">
   You’re well on your way to being in the know.
  </div>
 </div>
</div>
<p><em><strong>Did you know that the Lazarus Group is likely run by members of the North Korean government? Let us know in the comments below. </strong></em></p>
<p>The post <a rel="noopener noreferrer nofollow" href="https://tokenist.com/s-korea-successfully-foils-cyber-attack-by-us-sanctioned-lazarus-group-report/">S. Korea Successfully Foils Cyber Attack by US-Sanctioned Lazarus Group: Report</a> appeared first on <a rel="noopener noreferrer nofollow" href="https://tokenist.com">Tokenist</a>.</p>

S. Korea Successfully Foils Cyber Attack by US-Sanctioned Lazarus Group: Report

Table of Contents

TokenInsight

Other articles published on Apr 18, 2023

Join our free newsletter for daily crypto updates!