2023-09
Mixin Network disclosed that hackers attacked the database of its cloud service provider in the early morning of September 23, 2023 Hong Kong time, causing losses of mainnet assets and prompting a temporary suspension of deposits and withdrawals. Follow-o…
🇭🇰 Hong Kong
#Cryptocurrency
#FinancialGain
2023-09
CoinEx detected anomalous withdrawals from multiple exchange hot-wallet addresses on September 12, 2023 and suspended deposits and withdrawals while investigating unauthorized transactions involving assets including ETH, TRON, MATIC, BTC, XRP, BCH and SOL…
🇺🇸 United States
#Cryptocurrency
#FinancialGain
2023-09
Stake.com was robbed on or about September 4, 2023 after funds were taken from Stake-controlled Ethereum, Binance Smart Chain and Polygon addresses, with FBI attribution assigning the theft to DPRK Lazarus Group actors also known as APT38. TRM described s…
🇦🇺 Australia
#FinancialGain
#Entertainment
2023-08
Coinshfit was included in ZachXBT's analysis of 25 cryptocurrency hacks from August 2020 to October 2023 that were traced to Lazarus Group, also described as Bluenoroff or APT38. The linked laundering evidence maps stolen funds from the broader incident s…
🇺🇸 United States
#Cryptocurrency
#FinancialGain
2023-08
Steadefi lost about $1.14 million after its deployer address was compromised, allowing the attacker to take ownership of vault contracts on Arbitrum and Avalanche, abuse owner-only functions, drain available lending-vault funds, pause farm contracts and b…
🇻🇬 Virgin Islands, British
#Cryptocurrency
#FinancialGain
2023-07
Alphapo, a centralized cryptocurrency payment provider serving e-commerce subscription services, gaming sites and online businesses, suffered a hot-wallet compromise later estimated at more than $60 million. On-chain researchers and subsequent FBI-linked …
🇻🇨 Saint Vincent and the Grenadines
#Cryptocurrency
#FinancialGain
2023-07
CoinsPaid was hit by a July 2023 cryptocurrency theft that the company and multiple blockchain-analysis reports linked to Lazarus Group activity, with later reporting describing laundering through cross-chain bridges, token swaps, and mixers such as Sinba…
🇪🇪 Estonia
#Cryptocurrency
#FinancialGain
2023-06
JumpCloud disclosed a targeted compromise of internal infrastructure after a spear-phishing campaign, with anomalous activity in its commands framework affecting a small set of customers and forcing credential rotation, infrastructure rebuilds, and custom…
🇺🇸 United States
#SupplyChain
#Technology
2023-06
Atomic Wallet users suffered a major cryptocurrency theft across desktop and mobile wallets, with linked reporting tracking stolen funds through laundering patterns associated with North Korea’s Lazarus Group and the Sinbad mixer. Elliptic attributed the …
🇪🇪 Estonia
#Cryptocurrency
#FinancialGain
2023-04
In April 2023, malicious DPRK cyberactors targeted the UK-based DeFi project Merlin Dex and stole about $1.8 million in cryptoassets by draining the protocol's liquidity pools. OFSI said the attack was likely caused by a private key compromise or an inten…
🇬🇧 United Kingdom
#Cryptocurrency
#FinancialGain
2023-04
Terraport Finance was exploited on April 10, 2023 after a breach was detected in the Terraport Liquidity wallet, prompting the team to work with community members and major exchanges to secure and blacklist affected funds. A later postmortem described Ter…
🇬🇧 United Kingdom, 🇰🇷 Korea, Republic of
#Cryptocurrency
#FinancialGain
2023-03
SmoothOperator was a 3CXDesktopApp supply-chain compromise in which trojanized signed installers loaded malicious DLLs, retrieved encoded payload data from GitHub-hosted ICO files, and deployed follow-on malware including infostealer functionality against…
🇺🇸 United States
#SupplyChain
#Technology
2023-03
Lazarus abused DreamSecurity MagicLine4NX and related South Korean security-software distribution paths for watering-hole and supply-chain access against domestic targets in media, technology, defense, chemical, and other sectors. Reporting described expl…
🇰🇷 Korea, Republic of
#Wateringhole
#Media
#Technology
#Defense
2023-03
The South Korean manufacturing intrusion was included in a U.S. Justice Department case charging Rim Jong Hyok and co-conspirators over an Andariel campaign tied to North Korea’s Reconnaissance General Bureau. The indictment alleged that proceeds from Mau…
🇰🇷 Korea, Republic of
#FinancialGain
#Manufacturing
2023-01
South Korean judicial network reporting described a long-running breach of court systems in which North Korea-linked operators, later identified in several reports as Lazarus, compromised systems including Active Directory and internal servers and exfiltr…
🇰🇷 Korea, Republic of
#Government
#DataBreach