2024

DeFi

April

Security

SlowMist, a leading Blockchain security firm has uncovered Lazarus Group’s crafty plot, a cyber-hacker entity allegedly backed by the North Korean Government.&nbsp;
As SlowMist revealed on Monday, the cyber-hacker entity has continued in its sneaky business as it is targeting LinkedIn users by pretending to be an executive from Fenbushi Capital, a Chinese blockchain asset management firm. The imposters even used the real profile picture of&nbsp; Remington Ong, a Fenbushi Capital partner.&nbsp;
SlowMist’s Chief Information Security Officer ( CISO) shared a <a href="https://twitter.com/im23pds/status/1784763866771320861?s=46&amp;t=yoL7WJcO9vZ3TjSE2j6FRQ" rel="noopener noreferrer nofollow">screenshot on X,</a> showing the LinkedIn scammer using the name ‘Nevil Bolson,’ claiming to be a founding partner at Fenbushi. The CISO also found out that “Nevil Bolson ” was part of Lazarus by comparing IP addresses and noticing the same attack strategy being used.
<blockquote class="twitter-tweet" data-width="500" data-dnt="true">
 <img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;">Watch out for the <a href="https://twitter.com/hashtag/Lazarus?src=hash&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">#Lazarus</a> <img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f977.png" alt="🥷" class="wp-smiley" style="height: 1em; max-height: 1em;"><img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f1f0-1f1f5.png" alt="🇰🇵" class="wp-smiley" style="height: 1em; max-height: 1em;"> attack on the fake Fenbushi Capital on linkedin! <a href="https://twitter.com/fenbushi?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">@fenbushi</a> <a href="https://twitter.com/SlowMist_Team?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">@SlowMist_Team</a> <a href="https://twitter.com/boshen1011?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">@boshen1011</a> <a href="https://twitter.com/VitalikButerin?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">@VitalikButerin</a> <img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f447.png" alt="👇" class="wp-smiley" style="height: 1em; max-height: 1em;"> <a href="https://t.co/cAjAcPqkNj" rel="noopener noreferrer nofollow">pic.twitter.com/cAjAcPqkNj</a>
 — 23pds (@im23pds) <a href="https://twitter.com/im23pds/status/1784763866771320861?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">April 29, 2024</a>
</blockquote>
<h2 id="b-beware-of-sneaky-links-from-lazarus-group-b">Beware of Sneaky Links From Lazarus Group</h2>
According to 23pds, Lazarus Group would use this fake profile to privately chat with their targets on LinkedIn, pretending to be interested in investment opportunities. Then, they would suggest meeting up. Three weeks ago, the impostor shared a message saying, “Looking for Software developers. Please reach out to me for more discussion.”
The security firm <a href="https://slowmist.medium.com/analysis-of-north-korean-hackers-targeted-phishing-scams-on-telegram-872db3f7392b" rel="noopener noreferrer nofollow">revealed in a blog</a> that the Lazarus Group specifically focuses on well-known DeFi projects. This is one of the tactics the hacker group employs by pretending to be affiliated with an investment company. Once they gain the victim’s trust, the imposter sneaks in harmful links disguised as meeting invitations or event pages. Clicking on these links triggers a phishing attack. It has been confirmed that this fake LinkedIn profile is still active.&nbsp;
In 2023, it was reported that North Korea has been associated with the culprits that stole about <a href="https://thecoinrise.com/north-korean-hackers-behind-33-of-crypto-hacks-in-2023-report/" rel="noopener noreferrer nofollow">33% of crypto hacks</a>. The <a href="https://thecoinrise.com/un-north-korea-rakes-in-half-of-foreign-currency-via-crypto-scams/" rel="noopener noreferrer nofollow">UN Security Council</a> also revealed that 50% of foreign currency owned by North Korea was gained through cyber hacks and attacks.&nbsp;
<h2 id="b-security-breaches-in-the-cryptoworld-b">Security Breaches in the Cryptoworld&nbsp;</h2>
Over the years, several crypto companies have fallen victim to cyber hacks and attacks and <a href="https://www.chainalysis.com/blog/crypto-hacking-stolen-funds-2024/" rel="noopener noreferrer nofollow">according to Chainalysis</a>, around 231 hacks in the crypto space resulted in approximately $1.7 billion being stolen in 2022.
In 2022, Skakeeb Ahmed, a computer security engineer was charged for getting involved in a <a href="https://thecoinrise.com/nirvana-hack-engineer-sentenced-to-three-years/" rel="noopener noreferrer nofollow">flash loan worth millions of dollars attacked on Nirvana</a>, a decentralized crypto exchange. In the year, it was also reported that the users of <a href="https://www.chainalysis.com/blog/curve-finance-liquidity-pool-hack/" rel="noopener noreferrer nofollow">Curve Finance, a decentralized Finance</a> (DeFi), lost funds to cyber hacks.&nbsp;
Early this year, <a href="https://thecoinrise.com/us-doj-charges-two-in-alleged-1-89b-cryptocurrency-fraud-case/" rel="noopener noreferrer nofollow">the US Department of Justice made a significant stir </a>by bringing charges against two people and securing a guilty plea from another individual.
The post <a href="https://thecoinrise.com/slowmist-uncovers-north-koreas-lazarus-group-deceptive-disguise/" rel="noopener noreferrer nofollow">SlowMist Uncovers North Korea’s Lazarus Group Deceptive Disguise</a> appeared first on <a href="https://thecoinrise.com" rel="noopener noreferrer nofollow">Latest News and Insights on Blockchain, Cryptocurrency, and Investing</a>.

SlowMist Uncovers North Korea’s Lazarus Group Deceptive Disguise

Table of Contents

TheCoinrise Media

Other articles published on Apr 29, 2024

Will the SEC Prevail Against Ethereum? When Will ETH ETFs Be Approved? Giant Bank Comments

DOJ’s Tornado Cash arguments show ‘obvious disdain for privacy’ — Lawyer

New Viral Memecoin in Solana Network Stooges Launches $STOG Presale

Google says no ‘straight line’ between generative AI and unemployment — for now

METALSWAP KNOWLEDGE - GOLD VS BITCOIN ETFs SPOT LAUNCH

Cardano Struggles with Market Turbulence and Declining Prices

Join our free newsletter for daily crypto updates!