Lazarus Group News

Security researcher Taylor Monahan listed at least 40 decentralized finance platforms she claims have been infiltrated by North Korean IT workers at some stage of their lives.

The $280 million Drift Protocol attack was likely carried out by threat actors aligned with North Korea state-affiliated hackers.

Bitrefill didn’t reveal how much money was drained in the March 1 incident but said it will absorb the losses using its operational capital.

Mandiant, which operates under Google Cloud, has tracked the suspected North Korean scammers since 2018, and AI has helped scale up malicious attacks since November 2025.

Concerns about code vulnerabilities are fading in the crypto space, but more sophisticated scam tactics are emerging as protocol security improves.

New technologies, such as artificial intelligence, will only make bad actors more efficient and their attacks more sophisticated in 2026, cybersecurity company AhnLab predicts.

Ethereum smart account wallet platform SafeWallet has rearchitected its systems in the wake of the infamous $1.5 billion theft of ETH from Bybit.

The $116 million Balancer exploit appears to have been months in the making, with the attacker utilizing Tornado Cash and advanced methods to evade detection.

"EtherHiding" deploys in two phases by compromising a website, which then communicates with malicious code embedded in a smart contract.

Changpeng Zhao’s warning highlights a resurgence of threats from state-backed hacking groups, such as the North Korean Lazarus Group.

AI threat detection and enhanced wallet management may save crypto firms from North Korean infiltrators, cybersecurity experts told Cointelegraph.

A team of North Korean IT operatives behind 31 fake identities has been linked to the $680,000 hack of fan-token marketplace Favrr in June.

The Indian crypto exchange announced a recovery program of up to 25% for ethical hackers who can help recover the stolen stablecoins.

The Venn Network team suspects the threat was linked to the North Korean Lazarus Group, citing its complexity and widespread deployment.

TRM Labs said North Korea is moving away from hacks to focus more on deception-based revenue generation, such as planting IT workers in US companies.