Harmony

Aave

Olympic

Million

Axie Infinity

<p class="is-style-lead">While not much is known about the Lazarus Group, researchers have attributed numerous cyber attacks to them over the past decade, as well as ties to Russia.</p> 
<h2 class="wp-block-heading" id="the-most-notorious-crimes-of-lazarus-group">The most notorious crimes of Lazarus Group</h2> 
<p>The Lazarus Group (also known as the Guardians of Peace or the Whois Team) is a cybercriminal group with an unknown number of hackers.&nbsp;</p> 
<p>One of the earliest attacks is known as “Operation Troy”, which took place from 2009–2012. In 2014, Lazarus attacked Sony Pictures Entertainment and stole over 276 thousand company files, immediately appearing on WikiLeaks. The stolen documents reveal the company’s immediate plans, the actors’ fees and working conditions, and most importantly, shed light on how Sony lobbies its interests in the government.</p> 
<p><a href="https://www.kaspersky.com/about/press-releases/2017_chasing-lazarus-a-hunt-for-the-infamous-hackers-to-prevent-large-bank-robberies" target="_blank" rel="noopener">Kaspersky Lab</a> reported in 2017 that Lazarus tended to focus on espionage and cyberattacks while a subgroup within their organization. Kaspersky called it Bluenoroff.</p> 
<p>In February 2017, North Korean hackers stole $7 million from the South Korean exchange <a href="https://crypto.news/korean-crypto-exchange-crashes-rise-bitcoin-cash/">Bithumb</a>. Youbit, another South Korean crypto platform, filed for bankruptcy in December 2017 after 17% of its assets were stolen in cyber attacks.</p> 
<p> You might also like: <a href="https://crypto.news/fbi-lazarus-group-hacked-and-stole-41m-from-crypto-casino-stake/"> FBI: Lazarus Group hacked and stole $41m from crypto casino, Stake </a> </p> 
<p>Since the beginning of 2021, Lazarus has also begun to carry out attacks on cybersecurity researchers and increased activity in decentralized finance.</p> 
<p>One of the largest crypto hacks of all time occurred in 2022. Crypto gaming company Axie Infinity lost $620 million in cryptocurrency. Authorities later said North Korean cybercriminals linked to the Lazarus group were behind the massive theft.</p> 
<p>Analysts also believe that Lazarus Group is responsible for hacks of other crypto companies, including <a href="https://crypto.news/axie-infinity-ronin-network-hack-625m-usd-eth/">Ronin</a> sidechain, <a href="https://crypto.news/atomic-wallet-hacked-users-lose-millions-in-crypto/">Atomic Wallet</a>, <a href="https://crypto.news/alphapo-hacked-over-23-million-in-bitcoin-tron-and-ethereum-stolen/">Alphapo</a> platform, and Horizon cross-chain bridge.</p> 
<h2 class="wp-block-heading" id="how-many-cryptocurrencies-do-lazarus-hackers-have">How many cryptocurrencies do Lazarus hackers have?</h2> 
<p>According to <a href="https://dune.com/21co/lazarus-group-crypto-holdings" target="_blank" rel="noopener">21.co</a> analysts, Lazarus Group owns cryptocurrency worth at least $45 million at the time of writing.</p> 
<p>We are talking about 295 addresses that belong to the hacker group, according to information from the US Federal Bureau of Investigation and the Office of Foreign Assets Control.</p> 
<p>Notably, cyber criminals do not store the so-called confidential coins: Monero, Dash, and Zcash, transactions with which are more difficult to track. Instead, 90% of their wealth comes from Bitcoin (BTC). The hackers’ portfolio also includes other popular cryptocurrencies – Ether (ETH), Binance Coin (BNB), Binance USD (BUSD), staked ether (stETH), and Aave (AAVE).</p> 
<figure class="wp-block-image size-large">
 <img decoding="async" loading="lazy" width="1024" height="452" src="https://crypto.news/app/uploads/2023/09/Screenshot-2023-09-26-at-15.14.44-1024x452.png" alt="Lazarus Group: hackers from country with no internet threaten defi - 8" class="wp-image-14198347">
 <figcaption class="wp-element-caption">
  Lazarus Group crypto holdings | Source: <a href="https://dune.com/21co/lazarus-group-crypto-holdings" data-type="link" data-id="https://dune.com/21co/lazarus-group-crypto-holdings" target="_blank" rel="noopener">Dune</a>
 </figcaption>
</figure> 
<h2 class="wp-block-heading" id="connections-with-russia">Connections with Russia</h2> 
<p>The first cases of targeted Lazarus attacks on Russia appeared at the beginning of 2019, but then there was a lull. <a href="https://www.kaspersky.com/about/press-releases/2021_advanced-persistent-threat-actor-lazarus-attacks-defense-industry-develops-supply-chain-attack-capabilities" target="_blank" rel="noopener">Kaspersky Lab</a> experts claim that Lazarus hackers often rob cryptocurrency traders using virus programs. Other Lazarus attacks in Russia are aimed at collecting data from organizations associated with research and production of goods, analysts said.</p> 
<p>In 2023, <a href="https://www.chainalysis.com/blog/north-korea-russia-crypto-money-laundering/" target="_blank" rel="noopener">Chananalysis</a> experts said that hacker groups linked to North Korea were increasing their use of <a href="https://crypto.news/north-korean-hackers-turn-to-russia-to-launder-crypto/">Russian crypto exchanges</a>, which are known to launder illicit proceeds into crypto assets.</p> 
<p>On-chain data showed that $21.9 million worth of cryptocurrency stolen from the Harmony protocol was transferred to a Russian exchange known for processing illegal transactions. Experts also claim that North Korean structures have been using Russian services, including this exchange, for money laundering since 2021.</p> 
<figure class="wp-block-image size-large">
 <img decoding="async" loading="lazy" width="1024" height="958" src="https://crypto.news/app/uploads/2023/09/graph-asset-v2-bip122-000000000019d6689c085ae165831e93-native-copy-of-copy-of-taylorco-quarterly-report-garantex-1-1536x1437-1-1024x958.png" alt="Lazarus Group: hackers from country with no internet threaten defi - 9" class="wp-image-14198346">
 <figcaption class="wp-element-caption">
  Movements of stolen Harmony funds to the Russian exchange | Source: <a href="https://www.chainalysis.com/blog/north-korea-russia-crypto-money-laundering/" data-type="link" data-id="https://www.chainalysis.com/blog/north-korea-russia-crypto-money-laundering/" target="_blank" rel="noopener">Chainalysis</a>
 </figcaption>
</figure> 
<p>An alliance between North Korean and Russian cybercriminals poses a problem for global authorities. Russia is known to be unwilling to cooperate with international law enforcement efforts.</p> 
<p>This makes the prospect of recovering stolen assets sent to Russian exchanges particularly bleak. While the major centralized exchanges that North Korean hackers have previously relied on tend to cooperate, Russian exchanges and law enforcement have a history of non-compliance, greatly reducing the likelihood of asset recovery.</p> 
<h2 class="wp-block-heading" id="who-is-behind-the-north-korean-hackers">Who is behind the North Korean hackers?</h2> 
<p>It is unclear who is behind the group, but many experts and media attribute Lazarus to close ties to the North Korean government.</p> 
<p>Experts suggest that cybercrimes are committed to obtaining funds for the development of weapons, the purchase of fuel, and other resources. The anonymous nature of the cryptocurrency market allows transactions to be hidden, meaning that by paying for various goods with Bitcoins, North Korea can circumvent sanctions.</p> 
<p> You might also like: <a href="https://crypto.news/571-million-in-damages-north-korean-hacking-group-lazarus-behind-high-profile-cryptocurrency-hacks/"> $571 Million in Damages: North Korean Hacking Group Lazarus Behind High-Profile Cryptocurrency Hacks </a> </p> 
<h2 class="wp-block-heading" id="how-country-without-internet-supports-hackers">How country without internet supports hackers</h2> 
<p><a href="https://www.bbc.com/news/technology-32925495" target="_blank" rel="noopener">Martin Williams</a>, a fellow at the Stimson think tank, compares the process of training hackers in North Korea to the cultivation of Olympic champions in sports schools. Young people who have demonstrated the brightest abilities, ideological endurance, and sincere love for the authorities are allowed to continue their studies in higher educational institutions in the country. Some students end up receiving an offer from state security agencies that is difficult to refuse.</p> 
<p>According to <a href="https://www.newyorker.com/magazine/2021/04/26/the-incredible-rise-of-north-koreas-hacking-army" target="_blank" rel="noopener">The New Yorker</a>, the North Korean government has been unofficially supporting criminal groups since the 1970s that smuggled cigarettes, produced counterfeit dollar bills, and produced and distributed synthetic drugs in the region. Thus, encouraging online theft is not the birth of some fundamentally new phenomenon but an upgrade of an old one.</p> 
<p> You might also like: <a href="https://crypto.news/north-korean-hacking-groups-stole-721m-in-crypto-from-japan/"> North Korean hacking groups stole $721m in crypto from Japan </a> </p>

Lazarus Group: hackers from country with no internet threaten defi

Table of Contents

crypto.news

Other articles published on Sep 26, 2023

Axie Infinity and Ethereum tumble while Pomerdoge rallies

Leaked documents reveal Microsoft’s plans to bring crypto wallets to Xbox

LG Taps Label Foundation to Integrate Web3 Music Service to Its Smart TVs

Milk Partners Achieves Integration with OK Cashbag, Elevating Reward Point Utility

Japan’s FM Hints at Intervention as USD/JPY Breaks 149

Is Google’s Misleading Case Hitting The GOOG Share Price Badly?

Join our free newsletter for daily crypto updates!