2024

ZachXBT

April

Security

<p class="is-style-lead">North Korean hackers Lazarus Group used a fake LinkedIn profile to launch a cyber attack.</p> 
<p>SlowMist’s information security director, 23pds, found that hackers from the <a href="https://crypto.news/tag/Lazarus-Group/" target="_blank" rel="">Lazarus Group</a> used a fake LinkedIn profile of an investment company employee.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">🚨Watch out for the <a href="https://twitter.com/hashtag/Lazarus?src=hash&amp;ref_src=twsrc%5Etfw" target="_blank" rel="">#Lazarus</a> 🥷🇰🇵 attack on the fake Fenbushi Capital on linkedin! <a href="https://twitter.com/fenbushi?ref_src=twsrc%5Etfw" target="_blank" rel="">@fenbushi</a> <a href="https://twitter.com/SlowMist_Team?ref_src=twsrc%5Etfw" target="_blank" rel="">@SlowMist_Team</a> <a href="https://twitter.com/boshen1011?ref_src=twsrc%5Etfw" target="_blank" rel="">@boshen1011</a> <a href="https://twitter.com/VitalikButerin?ref_src=twsrc%5Etfw" target="_blank" rel="">@VitalikButerin</a> 👇 <a href="https://t.co/cAjAcPqkNj" target="_blank" rel="">pic.twitter.com/cAjAcPqkNj</a></p>— 23pds (@im23pds) <a href="https://twitter.com/im23pds/status/1784763866771320861?ref_src=twsrc%5Etfw" target="_blank" rel="">April 29, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>The expert discovered the user ‘Nevil Bolson’, allegedly a founding partner of the blockchain-focused Chinese asset management firm Fenbushi Capital. The attackers stole a photo from the page of a real company representative, Remington Ong.</p> 
<p>According to 23pds, hackers use a fake page to look for software developers in the decentralized finance (<a href="https://crypto.news/tag/defi/" target="_blank" rel="">defi</a>) segment and then send them phishing links. The faked profile was linked to the Lazarus Group thanks to matching IP addresses and a typical attack strategy.</p> 
<p> You might also like: <a href="https://crypto.news/crypto-hacking-losses-q1-2024/" rel=""> Crypto industry losses to hacking decreased by 23% in Q1 </a> </p> 
<p>According to a U.N. Security Council report, North Korean hackers often use phishing&nbsp;with social engineering techniques.&nbsp;Combined with the extensive technical data of the company’s computer system and&nbsp;the vulnerabilities present, the group finds an opportunity to compromise private keys.</p> 
<p>One of the Lazarus Group’s latest conquests was the gaming platform Munchables. In an attack on the platform, the group <a href="https://crypto.news/munchables-developer-with-ties-to-dprk-steals-then-return-62-5m-from-protocol/" target="_blank" rel="">stole</a> 17,500 Ethereum (<a href="https://crypto.news/price/Ethereum/" target="_blank" rel="">ETH</a>).</p> 
<p>Crypto expert ZachXBT claims that, between 2020 and 2023, Lazarus Group laundered $200 million through more than 25 crypto-to-fiat hacks. The expert concluded this by tracking 25 <a href="https://crypto.news/tag/hack/" target="_blank" rel="">hacks</a> interconnected across multiple blockchains and through mixers on centralized exchanges.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">1/ How Lazarus Group laundered $200M from 25+ crypto hacks to fiat from 2020 – 2023<a href="https://t.co/s8zNFwlamb" target="_blank" rel="">https://t.co/s8zNFwlamb</a></p>— ZachXBT (@zachxbt) <a href="https://twitter.com/zachxbt/status/1784935501935390930?ref_src=twsrc%5Etfw" target="_blank" rel="">April 29, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>However, $374,000 of the stolen money was frozen in November 2023, and an undisclosed amount was frozen on centralized exchanges in the fourth quarter of 2023. Three of the four <a href="https://crypto.news/tag/stablecoin/" rel="">stablecoin</a> issuers in the address group also froze another $3.4 million.</p> 
<p> You might also like: <a href="https://crypto.news/lazarus-group-crypto-bull-market/" rel=""> Is Lazarus Group the biggest threat to crypto in this bull market? </a> </p>

Lazarus Group hackers launch new method for cyber attacks

crypto.news

Other articles published on Apr 29, 2024

Poloniex WBTC Depreciation Imperils Justin Sun’s Empire

5 Cryptocurrencies Gearing For Next Let Up: DTX, RNDR, SOL, SHIB, & INJ

Analyst Forecasts Bitcoin Bull Run, This Altcoin Will Lead With Record Gains

Australian Securities Exchange Gears Up To List Spot Bitcoin ETFs This Year

Ethereum vs SEC: What next for Franklin Templeton Investments’ ETF

Scottminer Unveils Free Bitcoin Mining Platform

Join our free newsletter for daily crypto updates!