Bitcoin

ZachXBT

Tornado Cash

Tornado

Blockchain investigator ZachXBT shared seven wallet addresses containing 891.13 Bitcoin (<a href="https://cointelegraph.com/bitcoin-price">BTC</a>), which have ties to the infamous North Korean hacking group Lazarus.&nbsp;
On May 21, the crypto investigator shared the addresses on X. This follows the blockchain sleuth’s research on the hacker group that led to $3.8 million in digital assets being frozen by the authorities. 
At the time of writing, the crypto wallets identified by ZachXBT still hold the amounts flagged by the cryptocurrency investigator. 
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-05/5069a425-c1e1-4e74-889e-5955d8403acb.jpg" alt="" title="">
 <figcaption style="text-align: center;">
 Source: <a href="https://x.com/zachxbt/status/1792666848951239026" target="_blank" rel="noopener nofollow">ZachXBT</a>
 </figcaption>
</figure>
On April 29, ZachXBT published an in-depth analysis of how the state-backed hacker group has&nbsp;<a href="https://cointelegraph.com/news/lazarus-group-laundered-200m-crypto-since-2020">laundered $200 million from over 25 hacks</a> since 2020. 
The investigator determined that the hackers used peer-to-peer (P2P) marketplaces and crypto-mixing services to exchange the stolen crypto for fiat.
ZachXBT said that at least $44 million was laundered using the Paxul and Noones P2P marketplaces. The usernames “EasyGoatfish351” and “FairJunco470” displayed deposits and trading volumes that matched the stolen funds.
ZachXBT’s analysis also highlighted that the stolen digital assets were exchanged into Tether (<a href="https://cointelegraph.com/tether-price-index">USDT</a>) before being converted into fiat and withdrawn. 
Related: <a href="https://cointelegraph.com/news/north-korea-tornado-cash-crypto-laundering">North Korea used Tornado Cash to siphon HTX’s $147.5M loot: UN</a>
Lazarus Group became active again earlier this year after being inactive for some time. On Jan. 8, the North Korean hackers <a href="https://cointelegraph.com/news/north-korean-lazarus-group-moves-btc-weeks-inactivity">moved $1.2 million in stolen digital assets</a> from a mixer and sent some of the funds to an inactive wallet. 
The group transferred 27.37 BTC, worth $1.2 million at the time, in two transfers from what analysts determined to be a crypto mixer. After withdrawing the funds, the hackers moved 3.343 BTC, worth $150,582, to an address they had used before. 
On April 24, the hackers were spotted using the professional social media platform LinkedIn to target vulnerable users using malware attacks. 
Blockchain security firm Slowmist flagged the attack and explained that Lazarus Group hackers were <a href="https://cointelegraph.com/news/north-korean-lazarus-linkedin-target-steal-assets">pretending to apply for blockchain developer jobs</a> within the crypto ecosystem to access confidential employee credentials. 
The Lazarus Group continues to be one of the most notorious criminal organizations targeting the crypto space. In the six years leading to 2023, the group <a href="https://cointelegraph.com/news/north-korean-hackers-stolen-crypto">stole more than $3 billion</a> in digital assets. 
The $1.7 billion stolen in 2022 alone surpasses North Korea’s total annual income from exports by almost 10 times. 
Magazine: <a href="https://cointelegraph.com/magazine/north-korean-hackers-private-keys-flash-loan-attacks/">Lazarus Group’s favorite exploit revealed — Crypto hacks analysis</a>

ZachXBT flags Lazarus-linked addresses worth $61M

Cointelegraph

Other articles published on May 21, 2024

Ethereum Open Interest Reaches $14B High

Analyst Predicts Ethereum Competitor’s Potential Surge

The RAIN Philosophy: Beyond Founders Getting Rich

Fidelity Files Updated S-1 Application for Spot Ethereum ETF Ahead of SEC Looming Deadline

Ripple vs SEC Lawsuit Update: SEC Opposes Ripple’s Motion to Seal Evidence

Fidelity Amends S-1, Drops Staking Rewards from Ethereum ETF

Join our free newsletter for daily crypto updates!