North Korea’s infamous Lazarus Group is imitating venture capital firms and banks to steal cryptocurrency, according to a report from cybersecurity company Kaspersky.
The state-sponsored cybercrime group, which was behind the $625 million Axie Infinity hack in April, is building websites that lure people into thinking that they’re from well-known Japanese, US, and Vietnamese companies.
Kaspersky said Lazarus’ BlueNoroff subgroup is using new types of malware delivery methods that bypass security warnings about downloading content. They can then “intercept large cryptocurrency transfers, changing the recipient’s address, and pushing the transfer amount to the limit, essentially draining the account in a single transaction.”
Kaspersky’s lead security researcher said in a statement that 2023 will be marked by cyberattacks of unprecedented strength, and companies must work diligently to bolster security measures.
Ari Redbord, head of legal and government affairs at blockchain analytics firm TRM Labs, estimated that North Korea was responsible for more than $1 billion of the record $3.7 billion that crypto hackers around the globe swindled over the past year.
