ByBit

North Korean hackers, known as the Lazarus Group, have made headlines again with a record-breaking $1.5 billion crypto heist. This group, believed to be affiliated with the North Korean government, carried out a hacking attack on crypto exchange Bybit last month, stealing approximately $1.46 billion in cryptoassets.

The hackers used malware to trick the exchange into approving transactions that sent the funds to their wallets. This massive theft is considered the largest crypto heist in history, surpassing the $611 million stolen from Poly Network in 2021.

The Lazarus Group's modus operandi involves laundering the stolen funds through various services, including decentralized exchanges (DEXs), cross-chain bridges, and centralized exchanges. They also use "mixers" to further obscure the transaction trail.

In this case, the hackers converted the stolen Ether to Bitcoin using eXch, a cryptocurrency exchange that allows anonymous transactions. Despite warnings from Bybit, eXch refused to block the activity, earning hundreds of thousands of dollars in fees.

The Lazarus Group's links to the North Korean government are well-documented. The United States Department of Justice has stated that the group is part of North Korea's strategy to "undermine global cybersecurity" and generate illicit revenue.

The group's history of cyberattacks dates back to 2009, with notable incidents including the 2014 attack on Sony Pictures and the 2016 bank heist that stole $81 million from the Bangladesh Bank.

As the investigation continues, it's clear that the Lazarus Group's activities pose a significant threat to global cybersecurity and the cryptocurrency market.
A recent cyberattack on Dubai-based exchange Bybit has resulted in the theft of nearly $1.5 billion worth of Ether, marking the largest cryptocurrency theft in history. Blockchain analysis experts have confirmed that North Korean hackers were behind the attack and have successfully laundered most of the stolen funds, obscuring their origin and making it challenging for law enforcement to trace and recover them.

This incident is not an isolated one. Over the past few years, North Korean hackers have become increasingly proficient at cryptocurrency theft, stealing approximately $3 billion in digital currencies between 2017 and 2023. The FBI has attributed the recent attack to North Korean hackers, warning that they are rapidly converting the stolen assets into Bitcoin and other digital currencies.

North Korean hackers have used various methods to launder the stolen funds, including decentralized exchanges, cross-chain bridges, and Chinese banks. This allows them to evade sanctions and generate revenue for the regime. A UN panel of experts has warned that Pyongyang explicitly tasks its hackers with generating revenue for the regime, integrating financially motivated crime into its evolving offensive cyber strategy.

The substantial cryptocurrency reserves accumulated by North Korea raise concerns about the regime's ability to withstand economic pressure over its nuclear program. Furthermore, if North Korea can operate using Russian and Chinese networks, the United States and its allies may lose the ability to impose financial costs on the regime for its malign activities.

The U.S. government can play a crucial role in helping the crypto industry protect itself against North Korean hackers. By distributing the findings of investigations to industry groups and sharing and analysis centers, the government can help private companies strengthen their defenses against Pyongyang's attacks. With better information, cryptocurrency exchanges can avoid becoming victims of North Korean hackers and help prevent the laundering of stolen funds.

The recent cyberattack on Bybit and the laundering of $1.5 billion in cryptocurrency are a stark reminder of the growing threat posed by North Korean hackers. It is essential for the crypto industry, governments, and law enforcement agencies to work together to prevent these attacks and protect the integrity of the financial system.
#HackerAlert #bybit #crptonews $BTC
$ETH
$BNB

#HackerAlert The leading cryptocurrency exchange OKX was attacked by North Korean hackers Lazarus. The same ones who stole $1.5 billion from Bybit last month. Cybercriminals targeted the DEX aggregator. For this reason, OKX decided to suspend platform operations.
Users can still use other cryptocurrency services and wallets on OKX, but the creation of new wallets will be restricted in some regions until additional updates are completed. The timeline for the restoration of the DEX aggregator is currently unknown.