Arkham

Tornado Cash

Security

Read

Tornado

<div class="cryptonews"> 
 <p class="is-style-lead">SlowMist reveals a sophisticated APT attack by North Korea’s Lazarus Group targeting the cryptocurrency industry.</p> 
 <p>Blockchain security firm SlowMist has recently revealed an alarming revelation: The infamous North Korean Lazarus Group is actively <a rel="noopener noreferrer nofollow" title="targeting" href="https://thebittimes.com/tag/targeting.html">targeting</a> the <a rel="noopener noreferrer nofollow" title="crypto" href="https://thebittimes.com/tag/crypto.html">crypto</a>currency industry through an advanced persistent threat (APT) <a rel="noopener noreferrer nofollow" title="attack" href="https://thebittimes.com/tag/attack.html">attack</a>.</p> 
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"> 
  <div class="wp-block-embed__wrapper"> 
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
    <p lang="en" dir="ltr">SlowMist Security Alert<br><br>Recently, we and our partners discovered a large-scale APT <a rel="noopener noreferrer nofollow" title="attack" href="https://thebittimes.com/tag/attack.html">attack</a> directed by the North Korean #LazarusGroup against the <a rel="noopener noreferrer nofollow" title="crypto" href="https://thebittimes.com/tag/crypto.html">crypto</a>currency industry. <br><br>The <a rel="noopener noreferrer nofollow" title="attack" href="https://thebittimes.com/tag/attack.html">attack</a> method is as follows:<br><br>The <a rel="noopener noreferrer nofollow" title="attack" href="https://thebittimes.com/tag/attack.html">attack</a>er first disguises his identity, deceives the auditor… pic.twitter.com/XsM7F0bPcV</p>— SlowMist (@SlowMist_Team) September 12, 2023 
   </blockquote> 
  </div> 
 </figure> 
 <h2 class="wp-block-heading" id="what-are-apt-attacks">What are APT Attacks?</h2> 
 <p>An advanced persistent threat (APT) is a prolonged, <a rel="noopener noreferrer nofollow" title="target" href="https://thebittimes.com/tag/target.html">target</a>ed cyber<a rel="noopener noreferrer nofollow" title="attack" href="https://thebittimes.com/tag/attack.html">attack</a> where an intruder gains access to a network and remains undetected for an extended period. This kind of <a rel="noopener noreferrer nofollow" title="attack" href="https://thebittimes.com/tag/attack.html">attack</a> is generally state-sponsored or carried out by well-funded criminal organizations. What distinguishes APTs from other cyber<a rel="noopener noreferrer nofollow" title="attack" href="https://thebittimes.com/tag/attack.html">attack</a>s is the level of sophistication and the <a rel="noopener noreferrer nofollow" title="attack" href="https://thebittimes.com/tag/attack.html">attack</a>er’s intent to maintain persistent, unauthorized access to a network. The objective is usually espionage, data theft, or financial gain.</p> 
 <h2 class="wp-block-heading" id="inside-the-lazarus-apt-operation-against-crypto-companies">Inside the Lazarus APT operation against crypto companies&nbsp;</h2> 
 <p>Initially, they impersonate legitimate customers, fooling auditors through real-person authentication to create a customer profile. Then, with that trusted identity, they make genuine deposits to further solidify their façade.</p> 
 <div class="cn-block-related-link"> 
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"> <use xlink:href="#"></use> 
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> Tornado Cash creators deny laundering $1b for North Korea hackers 
 </div> 
 <p>Their sophisticated attack doesn’t stop there. Armed with customer status, they engage with company personnel through Mac or Windows Trojans, which are strategically aimed at employees. Once a Trojan infiltrates the system, the attackers secure permissions that allow them to move laterally within the network. From there, they lie in wait—sometimes for a considerable period—before seizing funds.</p> 
 <p>The Lazarus group is becoming increasingly threatening to the wider crypto industry. Just last week, the group stole $41 million worth of digital assets from leading crypto casino Stake.&nbsp;</p> 
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"> 
  <div class="wp-block-embed__wrapper"> 
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
    <p lang="en" dir="ltr">Wallet Addresses of the https://t.co/Ysm8KOCBL1 Hacker are live on the Arkham Platform.<br><br>The Stake Hacker removed ~$41M from Stake Hot Wallets in a series of “unauthorized transactions” on Monday.<br><br>Since then the hacker has begun moving the funds cross-chain. https://t.co/mCSIWNEX3K pic.twitter.com/XNGKQy5Z0k</p>— Arkham (@ArkhamIntel) September 7, 2023 
   </blockquote> 
  </div> 
 </figure> 
 <p>Lazarus is one of the most infamous North Korean state-backed ransomware groups. North Korea has been actively using stolen crypto assets to fund its illicit weapons program. Recently, South Korea has developed a new cyber bill to stop North Korea’s crypto heists.&nbsp;</p> 
 <div class="cn-block-related-link"> 
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"> <use xlink:href="#"></use> 
  </svg> <span class="cn-block-related-link__prefix"> Read more: </span> Seoul to target North Korea’s illicit crypto assets with a new cyber bill 
 </div> <span class="google-news-banner__label">Follow Us on Google News</span> 
</div> 
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/north-korean-lazarus-group-is-targeting-crypto-companies-with-apt-attacks-tbt62517.html">https://thebittimes.com/north-korean-lazarus-group-is-targeting-crypto-companies-with-apt-attacks-tbt62517.html</a></p>

North Korean Lazarus Group is targeting crypto companies with APT attacks

Table of Contents

TheBitTimes

Other articles published on Sep 13, 2023

Shiba Inu: So What Next for SHIB?

Sui Network hiccup leads to Cosmos dip, InQubeta role in defi highlighted in presale

Expert’s Warning: Ethereum Could Tumble to $1,200 Soon. Investors Flock To This New AI-Powered Coin

Horizen partners with Tatum to simplify dapp development on EON

Nicholas Merten’s Crypto Gloom Offset by $LTC and $ROE Growing Popularity

Ukraine probes local crypto exchanges for tax dodging

Join our free newsletter for daily crypto updates!