2024

Million

April

Tornado

The North Korean hacker collective known as the Lazarus Group has been identified by cybersecurity firm SlowMist as using LinkedIn to impersonate executives from the blockchain asset management company Fenbushi Capital. This strategy is part of a broader scheme to execute phishing attacks against blockchain industry professionals. 
According to SlowMist, the hackers have created a fraudulent LinkedIn account under the name “Nevil Bolson,” claiming to be a founding partner of Fenbushi. This profile uses the image of a legitimate Fenbushi partner, enhancing its credibility to deceive LinkedIn users.&nbsp; 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 🚨Watch out for the <a href="https://twitter.com/hashtag/Lazarus?src=hash&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener" data-wpel-link="external">#Lazarus</a> 🥷🇰🇵 attack on the fake Fenbushi Capital on linkedin! <a href="https://twitter.com/fenbushi?ref_src=twsrc%5Etfw" target="_blank" rel="noopener" data-wpel-link="external">@fenbushi</a> <a href="https://twitter.com/SlowMist_Team?ref_src=twsrc%5Etfw" target="_blank" rel="noopener" data-wpel-link="external">@SlowMist_Team</a> <a href="https://twitter.com/boshen1011?ref_src=twsrc%5Etfw" target="_blank" rel="noopener" data-wpel-link="external">@boshen1011</a> <a href="https://twitter.com/VitalikButerin?ref_src=twsrc%5Etfw" target="_blank" rel="noopener" data-wpel-link="external">@VitalikButerin</a> 👇 <a href="https://t.co/cAjAcPqkNj" target="_blank" data-wpel-link="external">pic.twitter.com/cAjAcPqkNj</a>— 23pds (@im23pds) <a href="https://twitter.com/im23pds/status/1784763866771320861?ref_src=twsrc%5Etfw" target="_blank" rel="noopener" data-wpel-link="external">April 29, 2024</a>
 </blockquote> 
 </div>
</figure> 
The fraudulent activities have escalated recently, with Lazarus focusing on employees who have a background in cryptocurrency, using the social platform as the main channel for their malicious activities. 
SlowMist’s findings also reveal that the group has been <a href="https://www.cryptotimes.io/2024/03/15/lazarus-group-executes-12m-ethereum-transaction/" data-wpel-link="internal">involved in moving $12 million</a> in Ethereum through Tornado Cash, a noted cryptocurrency mixer, as part of their financial maneuvers. Lazarus targets significant decentralized finance (DeFi) projects, using the crafted identity to insert malicious links that appear as legitimate business inquiries or event invitations. When clicked, these links initiate phishing attacks, posing a serious threat to data security and financial integrity in the blockchain sector. 
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow"> 
 Also read: <a href="https://www.cryptotimes.io/2024/04/25/lazarus-groups-linkedin-crypto-scam/" data-wpel-link="internal">Lazarus Group Lures Crypto Staff via Fake LinkedIn Profile</a> 
</blockquote>

Lazarus Group impersonates Fenbushi on LinkedIn for phishing

The Crypto Times

Other articles published on Apr 29, 2024

Hong Kong’s Bitcoin ETF to Debut Tomorrow Despite Regulatory Hurdles

Bitcoin dips as market tensions rise before Fed Reserve meeting

Bernstein Maintains Optimistic Outlook for Bitcoin, Projects $150,000 Target

UXLINK Announces 2024’s Largest Airdrop: Airdrop Voucher NFT Minting Set for May 3rd!

Bitcoin (BTC) Leads $435 Million Outflows as ETF Traders Shun Hype

Spot Crypto ETFs Launch in Hong Kong with Bitcoin and Ether Options: What Investors Need to Know

Join our free newsletter for daily crypto updates!