Bitcoin Heist: North Korea Linked to $308M Digital Currency Theft
Japanese and U.S. authorities have identified North Korean cyber actors as the culprits behind the theft of $308 million in cryptocurrency from DMM Bitcoin. This large-scale cyber heist took place on June 1st when criminals managed to steal 4,502.9 Bitcoin (BTC) from the wallets of the Japanese cryptocurrency exchange DMM Bitcoin, totaling around $304 million.
Following the incident, DMM Bitcoin took immediate action to address the situation. They ensured customers that their Bitcoin deposits would be fully guaranteed and implemented several limitations on their services. These included screening new account openings, processing cryptocurrency withdrawals, suspending buying orders for spot trading, and suspending new open positions for leveraged trading.
The FBI, Department of Defense Cyber Crime Center, and Japan’s National Police Agency jointly revealed that the theft was orchestrated by North Korean actors associated with TraderTraitor, also known as Lazarus Group and APT38. These threat actors had been involved in a sophisticated scheme targeting employees of related companies by posing as a LinkedIn recruiter and using social engineering tactics to gain access to sensitive information.
In August 2023, the FBI identified six cryptocurrency wallets linked to TraderTraitor-affiliated actors, containing approximately 1,580 Bitcoin valued at around $41 million. The bureau warned that these hackers might attempt to cash out the stolen funds, emphasizing the importance of vigilance among cryptocurrency companies.
This incident is part of a larger pattern of cyber theft orchestrated by North Korea-linked APT groups, who have targeted various cryptocurrency exchanges in the past. It is crucial for private sector entities to monitor blockchain data associated with suspicious addresses and remain vigilant against transactions with potentially malicious sources.
Overall, the investigation into the $308 million cryptocurrency heist from DMM Bitcoin serves as a reminder of the ongoing threats posed by cybercriminals and the importance of robust cybersecurity measures in the digital age.
