2024

Million

April

Tornado

The North Korean hacker collective known as the Lazarus Group has been identified by cybersecurity firm SlowMist as using LinkedIn to impersonate executives from the blockchain asset management company Fenbushi Capital. This strategy is part of a broader scheme to execute phishing attacks against blockchain industry professionals. 
According to SlowMist, the hackers have created a fraudulent LinkedIn account under the name “Nevil Bolson,” claiming to be a founding partner of Fenbushi. This profile uses the image of a legitimate Fenbushi partner, enhancing its credibility to deceive LinkedIn users.&nbsp; 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 🚨Watch out for the <a href="https://twitter.com/hashtag/Lazarus?src=hash&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener" data-wpel-link="external">#Lazarus</a> 🥷🇰🇵 attack on the fake Fenbushi Capital on linkedin! <a href="https://twitter.com/fenbushi?ref_src=twsrc%5Etfw" target="_blank" rel="noopener" data-wpel-link="external">@fenbushi</a> <a href="https://twitter.com/SlowMist_Team?ref_src=twsrc%5Etfw" target="_blank" rel="noopener" data-wpel-link="external">@SlowMist_Team</a> <a href="https://twitter.com/boshen1011?ref_src=twsrc%5Etfw" target="_blank" rel="noopener" data-wpel-link="external">@boshen1011</a> <a href="https://twitter.com/VitalikButerin?ref_src=twsrc%5Etfw" target="_blank" rel="noopener" data-wpel-link="external">@VitalikButerin</a> 👇 <a href="https://t.co/cAjAcPqkNj" target="_blank" data-wpel-link="external">pic.twitter.com/cAjAcPqkNj</a>— 23pds (@im23pds) <a href="https://twitter.com/im23pds/status/1784763866771320861?ref_src=twsrc%5Etfw" target="_blank" rel="noopener" data-wpel-link="external">April 29, 2024</a>
 </blockquote> 
 </div>
</figure> 
The fraudulent activities have escalated recently, with Lazarus focusing on employees who have a background in cryptocurrency, using the social platform as the main channel for their malicious activities. 
SlowMist’s findings also reveal that the group has been <a href="https://www.cryptotimes.io/2024/03/15/lazarus-group-executes-12m-ethereum-transaction/" data-wpel-link="internal">involved in moving $12 million</a> in Ethereum through Tornado Cash, a noted cryptocurrency mixer, as part of their financial maneuvers. Lazarus targets significant decentralized finance (DeFi) projects, using the crafted identity to insert malicious links that appear as legitimate business inquiries or event invitations. When clicked, these links initiate phishing attacks, posing a serious threat to data security and financial integrity in the blockchain sector. 
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow"> 
 Also read: <a href="https://www.cryptotimes.io/2024/04/25/lazarus-groups-linkedin-crypto-scam/" data-wpel-link="internal">Lazarus Group Lures Crypto Staff via Fake LinkedIn Profile</a> 
</blockquote>

Lazarus Group impersonates Fenbushi on LinkedIn for phishing

The Crypto Times

Other articles published on Apr 29, 2024

Circle’s USDC Takes the Lead in Stablecoin Transactions

Ripple CTO David Schwartz and Cardano founder debate ETH Gate theory

Housemarque Teases Mysterious New Project

Crypto Investment Products Face Stiff Withdrawals

Post-Halving Boom: Bitcoin Fees Eclipse 1,200 BTC and Miners Reap Rewards

Is Ethereum Foundation Planning Something Big? Inactive Address Transfers $6.5 Million

Join our free newsletter for daily crypto updates!