A staggering $659 million in cryptocurrency was stolen by hackers affiliated with North Korea's Lazarus Group in 2024, according to a joint report released by Japan, South Korea, and the US. The report sheds light on the group's sophisticated tactics and massive financial gains, sparking concerns about the security of the cryptocurrency industry.
The report specifically links the Lazarus Group to five major crypto heists in 2024, including the $235 million theft from Indian crypto exchange WazirX. This incident is just the latest in a long string of attacks attributed to the group, which has stolen an estimated billions of dollars across previous attacks over the last decade, including $625 million from Axie Infinity in 2022.
One of the most significant losses was suffered by Japan's DMM Bitcoin, which lost a whopping $308 million, ultimately leading to the exchange's closure. The report highlights the group's aggressive targeting of the cryptocurrency industry, employing well-disguised social engineering attacks that deploy malware, such as TraderTraitor and AppleJeus.
The tactics used by the Lazarus Group are particularly concerning, as they involve individualized fake scenarios, such as enticing victims with prospective jobs and business opportunities. The FBI warned about these methods in September 2024, noting that the group uses convincing impersonations of trusted contacts or prominent people of interest in related industries, often using realistic photos and information lifted from public social media accounts.
The joint report advises businesses in the industry to be vigilant and take necessary precautions to reduce their risk of falling victim to these sophisticated attacks. This includes being cautious of "inadvertently hiring DPRK IT workers," as described in a recent report by CoinDesk. The warning serves as a stark reminder of the importance of robust security measures and due diligence in the cryptocurrency industry.
The report's findings have significant implications for the cryptocurrency industry, highlighting the need for increased cooperation and information sharing between governments and industry stakeholders to combat these types of attacks. As the cryptocurrency market continues to grow, it is essential that security measures keep pace to prevent further losses and protect investors.
In conclusion, the joint report's attribution of massive crypto heists to North Korea's Lazarus Group serves as a stark reminder of the risks and challenges facing the cryptocurrency industry. As the industry continues to evolve, it is crucial that security measures and international cooperation keep pace to prevent further losses and protect investors.