Harmony

Olympic

Bitcoin

Axie Infinity

Coin

<div class="cryptonews"> 
 <p class="is-style-lead">While not much is known about the Lazarus Group, researchers have attributed numerous cyber attacks to them over the past decade, as well as ties to Russia.</p> 
 <h2 class="wp-block-heading" id="the-most-notorious-crimes-of-lazarus-group">The most notorious crimes of Lazarus Group</h2> 
 <p>The Lazarus Group (also known as the Guardians of Peace or the Whois Team) is a cybercriminal group with an unknown number of <a rel="dofollow" title="hackers" href="https://thebittimes.com/tag/hackers.html">hackers</a>.&nbsp;</p> 
 <p>One of the earliest attacks is known as “Operation Troy”, which took place from 2009–2012. In 2014, Lazarus attacked Sony Pictures Entertainment and stole over 276 thousand company files, immediately appearing on WikiLeaks. The stolen documents reveal the company’s immediate plans, the actors’ fees and working conditions, and most importantly, shed light on how Sony lobbies its interests in the government.</p> 
 <p>Kaspersky Lab reported in 2017 that Lazarus tended to focus on espionage and cyberattacks while a subgroup within their organization. Kaspersky called it Bluenoroff.</p> 
 <p>In February 2017, North Korean hackers stole $7 million from the South Korean exchange Bithumb. Youbit, another South Korean crypto platform, filed for bankruptcy in December 2017 after 17% of its assets were stolen in cyber attacks.</p> 
 <div class="cn-block-related-link"> 
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"> <use xlink:href="#"></use> 
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> FBI: Lazarus Group hacked and stole $41m from crypto casino, Stake 
 </div> 
 <p>Since the beginning of 2021, Lazarus has also begun to carry out attacks on cybersecurity researchers and increased activity in decentralized finance.</p> 
 <p>One of the largest crypto hacks of all time occurred in 2022. Crypto gaming company Axie Infinity lost $620 million in cryptocurrency. Authorities later said North Korean cybercriminals linked to the Lazarus group were behind the massive theft.</p> 
 <p>Analysts also believe that Lazarus Group is responsible for hacks of other crypto companies, including Ronin sidechain, Atomic Wallet, Alphapo platform, and Horizon cross-chain bridge.</p> 
 <h2 class="wp-block-heading" id="how-many-cryptocurrencies-do-lazarus-hackers-have">How many cryptocurrencies do Lazarus hackers have?</h2> 
 <p>According to 21.co analysts, Lazarus Group owns cryptocurrency worth at least $45 million at the time of writing.</p> 
 <p>We are talking about 295 addresses that belong to the <a rel="dofollow" title="hacker" href="https://thebittimes.com/tag/hacker.html">hacker</a> group, according to information from the US Federal Bureau of Investigation and the Office of Foreign Assets Control.</p> 
 <p>Notably, cyber criminals do not store the so-called confidential coins: Monero, Dash, and Zcash, transactions with which are more difficult to track. Instead, 90% of their wealth comes from Bitcoin (BTC). The hackers’ portfolio also includes other popular cryptocurrencies – Ether (ETH), Binance Coin (BNB), Binance USD (BUSD), staked ether (stETH), and Aave (AAVE).</p> 
 <figure class="wp-block-image size-large">
  <picture decoding="async" class="wp-image-14198347"> 
   <source type="image/webp" srcset="https://cdn.thebittimes.com/images/2023/09/26/bd80787558864e96368ba2176d8e7f5e.webp.webp"> 
   <img decoding="async" width="1024" height="452" src="https://cdn.thebittimes.com/images/2023/09/26/bd80787558864e96368ba2176d8e7f5e.webp" alt="Lazarus Group: hackers from country with no internet threaten defi - 1"> 
  </picture> 
  <figcaption class="wp-element-caption">
   Lazarus Group crypto holdings | Source: Dune
  </figcaption>
 </figure> 
 <h2 class="wp-block-heading" id="connections-with-russia">Connections with Russia</h2> 
 <p>The first cases of targeted Lazarus attacks on Russia appeared at the beginning of 2019, but then there was a lull. Kaspersky Lab experts claim that Lazarus hackers often rob cryptocurrency traders using virus programs. Other Lazarus attacks in Russia are aimed at collecting data from organizations associated with research and production of goods, analysts said.</p> 
 <p>In 2023, Chananalysis experts said that hacker groups linked to North Korea were increasing their use of Russian crypto exchanges, which are known to launder illicit proceeds into crypto assets.</p> 
 <p>On-chain data showed that $21.9 million worth of cryptocurrency stolen from the Harmony protocol was transferred to a Russian exchange known for processing illegal transactions. Experts also claim that North Korean structures have been using Russian services, including this exchange, for money laundering since 2021.</p> 
 <figure class="wp-block-image size-large">
  <picture decoding="async" class="wp-image-14198346"> 
   <source type="image/webp" srcset="https://cdn.thebittimes.com/images/2023/09/26/27cc65d52fb27c9ecdab97b39b1160e8.webp.webp"> 
   <img decoding="async" width="1024" height="958" src="https://cdn.thebittimes.com/images/2023/09/26/27cc65d52fb27c9ecdab97b39b1160e8.webp" alt="Lazarus Group: hackers from country with no internet threaten defi - 2"> 
  </picture> 
  <figcaption class="wp-element-caption">
   Movements of stolen Harmony funds to the Russian exchange | Source: Chainalysis
  </figcaption>
 </figure> 
 <p>An alliance between North Korean and Russian cybercriminals poses a problem for global authorities. Russia is known to be unwilling to cooperate with international law enforcement efforts.</p> 
 <p>This makes the prospect of recovering stolen assets sent to Russian exchanges particularly bleak. While the major centralized exchanges that North Korean <a rel="dofollow" title="hackers" href="https://thebittimes.com/tag/hackers.html">hackers</a> have previously relied on tend to cooperate, Russian exchanges and law enforcement have a history of non-compliance, greatly reducing the likelihood of asset recovery.</p> 
 <h2 class="wp-block-heading" id="who-is-behind-the-north-korean-hackers">Who is behind the North Korean hackers?</h2> 
 <p>It is unclear who is behind the group, but many experts and media attribute Lazarus to close ties to the North Korean government.</p> 
 <p>Experts suggest that cybercrimes are committed to obtaining funds for the development of weapons, the purchase of fuel, and other resources. The anonymous nature of the cryptocurrency market allows transactions to be hidden, meaning that by paying for various goods with Bitcoins, North Korea can circumvent sanctions.</p> 
 <div class="cn-block-related-link"> 
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"> <use xlink:href="#"></use> 
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> $571 Million in Damages: North Korean Hacking Group Lazarus Behind High-Profile Cryptocurrency Hacks 
 </div> 
 <h2 class="wp-block-heading" id="how-country-without-internet-supports-hackers">How country without internet supports hackers</h2> 
 <p>Martin Williams, a fellow at the Stimson think tank, compares the process of training <a rel="dofollow" title="hackers" href="https://thebittimes.com/tag/hackers.html">hackers</a> in North Korea to the cultivation of Olympic champions in sports schools. Young people who have demonstrated the brightest abilities, ideological endurance, and sincere love for the authorities are allowed to continue their studies in higher educational institutions in the <a rel="dofollow" title="country" href="https://thebittimes.com/tag/country.html">country</a>. Some students end up receiving an offer from state security agencies that is difficult to refuse.</p> 
 <p>According to The New Yorker, the North Korean government has been unofficially supporting criminal groups since the 1970s that smuggled cigarettes, produced counterfeit dollar bills, and produced and distributed synthetic drugs in the region. Thus, encouraging online theft is not the birth of some fundamentally new phenomenon but an upgrade of an old one.</p> 
 <div class="cn-block-related-link"> 
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"> <use xlink:href="#"></use> 
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> North Korean hacking groups stole $721m in crypto from Japan 
 </div> <span class="google-news-banner__label">Follow Us on Google News</span> 
</div> 
<p>Source: <a rel="dofollow" target="_blank" href="https://thebittimes.com/lazarus-group-hackers-from-country-with-no-internet-threaten-defi-tbt64084.html">https://thebittimes.com/lazarus-group-hackers-from-country-with-no-internet-threaten-defi-tbt64084.html</a></p>

Lazarus Group: hackers from country with no internet threaten defi

Table of Contents

TheBitTimes

Other articles published on Sep 26, 2023

A New 100x Pump is Beginning – WSM OKX Exchange Listing Has Investors Going Crazy

Leaked Documents Reveal Microsoft’s Secret Plan: Crypto Wallets Coming to Xbox

BitBoy Crypto Arrested for Lamborghini Heist Livestream

Monero, Tradecurve Markets, and Toncoin: Microsoft AI’s Top 3 Picks in Cryptos

Celestia Airdrop: Celestia Launches Genesis Drop to Build Modular Data Availability Network

LeverFi Receives $2 Million Investment from DWF Labs

Join our free newsletter for daily crypto updates!