North Korean hackers behind CryptoCore multi-million dollar heists


Level 74
Content Creator
Malware Hunter
Aug 17, 2014
Security researchers piecing together evidence from multiple attacks on cryptocurrency exchanges, attributed to a threat actor they named CryptoCore have established a strong connection to the North Korean state-sponsored group Lazarus.

The group is believed to have stolen hundreds of millions of U.S. dollars by breaching cryptocurrency exchanges in the U.S., Israel, Europe, and Japan over the past three years.
In a new report today, ClearSky compared the details in these researches to their findings and noticed sufficient similarities to confidently attribute the attacks to the same actor.