2023-08
Coinshfit was included in ZachXBT's analysis of 25 cryptocurrency hacks from August 2020 to October 2023 that were traced to Lazarus Group, also described as Bluenoroff or APT38. The linked laundering evidence maps stolen funds from the broader incident s…
🇺🇸 United States
#Cryptocurrency
#FinancialGain
2023-08
Steadefi lost about $1.14 million after its deployer address was compromised, allowing the attacker to take ownership of vault contracts on Arbitrum and Avalanche, abuse owner-only functions, drain available lending-vault funds, pause farm contracts and b…
🇻🇬 Virgin Islands, British
#Cryptocurrency
#FinancialGain
2023-07
Alphapo, a centralized cryptocurrency payment provider serving e-commerce subscription services, gaming sites and online businesses, suffered a hot-wallet compromise later estimated at more than $60 million. On-chain researchers and subsequent FBI-linked …
🇻🇨 Saint Vincent and the Grenadines
#Cryptocurrency
#FinancialGain
2023-07
CoinsPaid was hit by a July 2023 cryptocurrency theft that the company and multiple blockchain-analysis reports linked to Lazarus Group activity, with later reporting describing laundering through cross-chain bridges, token swaps, and mixers such as Sinba…
🇪🇪 Estonia
#Cryptocurrency
#FinancialGain
2023-06
JumpCloud disclosed a targeted compromise of internal infrastructure after a spear-phishing campaign, with anomalous activity in its commands framework affecting a small set of customers and forcing credential rotation, infrastructure rebuilds, and custom…
🇺🇸 United States
#SupplyChain
#Technology
2023-06
Atomic Wallet users suffered a major cryptocurrency theft across desktop and mobile wallets, with linked reporting tracking stolen funds through laundering patterns associated with North Korea’s Lazarus Group and the Sinbad mixer. Elliptic attributed the …
🇪🇪 Estonia
#Cryptocurrency
#FinancialGain
2023-04
In April 2023, malicious DPRK cyberactors targeted the UK-based DeFi project Merlin Dex and stole about $1.8 million in cryptoassets by draining the protocol's liquidity pools. OFSI said the attack was likely caused by a private key compromise or an inten…
🇬🇧 United Kingdom
#Cryptocurrency
#FinancialGain
2023-04
Terraport Finance was exploited on April 10, 2023 after a breach was detected in the Terraport Liquidity wallet, prompting the team to work with community members and major exchanges to secure and blacklist affected funds. A later postmortem described Ter…
🇬🇧 United Kingdom, 🇰🇷 Korea, Republic of
#Cryptocurrency
#FinancialGain
2023-03
SmoothOperator was a 3CXDesktopApp supply-chain compromise in which trojanized signed installers loaded malicious DLLs, retrieved encoded payload data from GitHub-hosted ICO files, and deployed follow-on malware including infostealer functionality against…
🇺🇸 United States
#SupplyChain
#Technology
2023-03
Lazarus abused DreamSecurity MagicLine4NX and related South Korean security-software distribution paths for watering-hole and supply-chain access against domestic targets in media, technology, defense, chemical, and other sectors. Reporting described expl…
🇰🇷 Korea, Republic of
#Wateringhole
#Media
#Technology
#Defense
2023-03
The South Korean manufacturing intrusion was included in a U.S. Justice Department case charging Rim Jong Hyok and co-conspirators over an Andariel campaign tied to North Korea’s Reconnaissance General Bureau. The indictment alleged that proceeds from Mau…
🇰🇷 Korea, Republic of
#FinancialGain
#Manufacturing
2023-01
South Korean judicial network reporting described a long-running breach of court systems in which North Korea-linked operators, later identified in several reports as Lazarus, compromised systems including Active Directory and internal servers and exfiltr…
🇰🇷 Korea, Republic of
#Government
#DataBreach
2023-01
The Taiwanese defense contractor intrusion was included in the U.S. Justice Department’s Andariel case against Rim Jong Hyok and alleged co-conspirators tied to North Korea’s Reconnaissance General Bureau. Prosecutors said the group used laundered Maui ra…
🇹🇼 Taiwan
#DataBreach
#Defense
2022-11
In November 2022, Deribit suffered a hot-wallet theft of about $28 million across Bitcoin, Ethereum, and USDC. The exchange paused withdrawals, said client assets and cold-storage funds were unaffected, and covered the loss from company reserves; linked t…
🇵🇦 Panama
#Cryptocurrency
#FinancialGain
2022-11
The Massachusetts defense company intrusion was included in the U.S. Justice Department’s Andariel case charging Rim Jong Hyok and alleged co-conspirators linked to North Korea’s Reconnaissance General Bureau. The indictment alleged that Maui ransomware p…
🇺🇸 United States
#DataBreach
#Defense