A subgroup of the North Korea-linked Lazarus hacker organization has been targeting unsuspecting users by setting up three fake crypto consulting companies. These shell companies, named BlockNovas, Angeloper Agency, and SoftGlide, are designed to distribute malware under the guise of job recruitment, according to a report from Silent Push, a ...
North Korean-affiliated hacking group Lazarus has continued its illicit activities, moving stolen crypto through mixers and launching new malware attacks on developers. On March 13, blockchain security firm CertiK flagged a 400 ETH deposit valued at approximately $750,000 into the Tornado Cash mixing service. According to CertiK, the funds originated ...
North Korea’s state-backed hacking group, Lazarus, has launched a fresh supply chain attack, injecting six malicious npm packages designed to steal credentials and exfiltrate cryptocurrency data. The campaign, uncovered by the Socket Research Team, leverages BeaverTail malware to infiltrate developers' systems and extract sensitive information. According to the researchers, the ...
North Korea’s notorious cybercrime syndicate, the Lazarus Group, has successfully laundered the entirety of the 499,000 ETH stolen in the recent Bybit hack, amounting to approximately $1.39 billion, in just ten days, according to on-chain analyst EmberCN. According to a March 4 post on X by on-chain analyst EmberCN, Tracking ...
Blockchain intelligence firm Arkham Intelligence has confirmed that the North Korean state-backed Lazarus Group is responsible for the massive $1.46 billion exploit of crypto exchange Bybit on February 21. The revelation came after on-chain investigator ZachXBT successfully traced wallet connections leading back to the notorious hacker collective. Arkham had offered ...
Alex Lab, a Bitcoin layer-2 developer, has suggested that the $4 million exploit it suffered in May could be connected to the notorious North Korean hacking group, Lazarus Group. In a June 25 post on X, the team identified three wallet addresses used by hackers on May 16 to siphon ...
