\n<\/p>\n
Hackers in North Korea stole a total of $659 million in crypto across several heists in 2024, according to a joint statement<\/a> issued today by the US, Japan, and South Korea. The report specified five such incidents, like the $235 million theft from the Indian crypto exchange WazirX that is being newly attributed to the Lazarus Group. That organization is estimated to have stolen billions across previous attacks over the last decade, including $625 million stolen from Axie Infinity<\/em> in 2022<\/a>.<\/p>\n<\/div>\n As recently as September 2024, the United States government observed aggressive targeting of the cryptocurrency industry by the DPRK with well-disguised social engineering attacks that ultimately deploy malware, such as TraderTraitor, AppleJeus and others. The Republic of Korea and Japan have observed similar trends and tactics used by the DPRK.<\/p>\n<\/blockquote>\n<\/div>\n A warning issued by the FBI last September<\/a> noted that their methods to gain access for delivering these payloads include \u201cindividualized fake scenarios,\u201d such as enticing victims with prospective jobs and business opportunities. All three countries advised businesses in the industry to check out the latest warning to reduce their risk of \u201cinadvertently hiring DPRK IT workers,\u201d as described in this recent report by CoinDesk<\/em><\/a>.<\/p>\n<\/div>\n They\u2019ve also used long-time common phishing tactics against employees of crypto firms, such as convincing impersonations of trusted contacts or prominent people of interest in related industries, with realistic photos and information likely lifted from public social media accounts of known connections. <\/p>\n<\/div>\n\n