The U.S. Federal Bureau of Investigation warned crypto operators that entities connected to North Korean hackers may attempt to sell more than $40 million worth of bitcoin. The intelligence and security service issued a statement today that it had tracked crypto stolen by entities (Lazarus Group and APT38) tied to the Democratic People’s Republic of Korea (DPRK), using tactics called “TraderTraitor.” “The FBI believes the DPRK may attempt to cash out the bitcoin worth more than $40 million dollars,” the agency said, and added a list of Bitcoin addresses where the funds are currently held, having recently been moved. “Private sector entities should examine the blockchain data associated with these addresses and be vigilant in guarding against transactions directly with, or derived from, the addresses,” the agency added. The Lazarus Group in North Korea has consistently targeted the blockchain sector, utilizing spearphishing methods and malicious software to steal cryptocurrency. These attacks often begin with a multitude of spearphishing emails directed at IT employees, aiming to lure the recipients into downloading applications tainted with malware. The U.S. government refers to these malicious applications as TraderTraitor.
About OODA Analyst
OODA is comprised of a unique team of international experts capable of providing advanced intelligence and analysis, strategy and planning support, risk and threat management, training, decision support, crisis response, and security services to global corporations and governments.