Skip to content
- North Korean cyberattacks on the crypto industry are becoming more advanced.
- The number of hacking groups involved in these activities is increasing.
- Crypto firms must strengthen security to counter these growing threats.
North Korea’s hackers are raising the stakes in the cryptocurrency world. According to Paradigm’s latest report, these cybercriminals are getting smarter and more organized. A recent attack on Bybit, one of the largest exchanges, exposed the growing sophistication of their methods.
North Korea is behind another heist, this one draining more than $1 billion from Bybit’s cold wallet. Hackers quickly turned around and cashed out $200 million. The initial belief was that it was just a standard technical glitch, but security experts soon confirmed it was an intentional hack. The perpetrators? The same group behind billions of dollars’ worth of heists in the past.
This time, the assault differed from past breaches. Rather than phishing or social engineering attacks on individuals, the intruders penetrated SafeWallet, an extremely respected security infrastructure. Through this, they managed to inject malicious code that tricked Bybit engineers into unwittingly approving fraudulent trades.
TraderTraitor Masters of Crypto Deception
North Korea does not utilize a single group of cyber operators. There are various hacking teams working within the nation, each focused on their own areas. The most notorious among them is the Lazarus Group, long linked to high-profile cyberattacks.
APT38 is another financial-focused group. They initially targeted banks and then moved on to cryptocurrencies. AppleJeus spreads malware as trading software. DangerousPassword carries out phishing attacks, and users are tricked into downloading malware.
TraderTraitor is considered the most advanced. They have managed to compromise major crypto businesses, including Axie Infinity and Rain.com. They use highly tailored social engineering attacks, sometimes tricking employees into giving them access credentials by pretending to be job opportunities.
Building Alliances for Better Protection
Cryptocurrency businesses are finding it an uphill battle to ward off these cyber attacks. North Korea’s cybercriminals may not have exploited zero-day vulnerabilities against cryptocurrency businesses, but their social engineering attacks are quite active.
They must exercise vigilance when faced with unfamiliar sources. Unsolicited job offers, emergency file downloads, or secret investment proposals can be bait. Organizations must put stringent security protocols, including multi-factor authentication and endpoint monitoring, in place. Exchanges and businesses handling cryptocurrencies must prepare for the worst.
It is imperative to increase security, but building relations with cybersecurity experts and officials is also essential. The FBI and security organizations like SEAL 911 are already working to pursue and deter further attacks. The cybercrime war is ongoing, and staying one step ahead means being ever-vigilant and taking proactive measures.
Related Reading: Bitcoin Outperforms Gold and Stocks After Election Day, Bitwise CIO Reveals Impressive Returns
