The Federal Bureau of Investigation formally attributed the historic 6.3 billion dollar digital asset theft from cryptocurrency exchange Binance to cyber warfare operatives aligned with North Korea’s state-sponsored Lazarus Group, also tracked by intelligence agencies as TraderTraitor. Cyber forensic investigators disclosed that the intrusion was initiated when North Korean hackers compromised an internal DevOps engineer’s personal laptop through a sophisticated spear-phishing campaign featuring malicious job recruitment documents. Once inside internal networks, the state-backed actors harvested cryptographic credentials to authorize massive automated hot-wallet withdrawals.
The federal advisory coincided with Binance’s cautious resumption of phased platform withdrawals following an exhaustive multi-day security lockdown and credential overhaul. Intelligence analysts emphasized that Pyongyang continues to rely extensively on industrial-scale cryptocurrency heists to circumvent international sanctions and finance its ballistic missile and nuclear weapons development programs. Federal authorities published technical indicators of compromise and malicious wallet clusters, urging global blockchain validators, stablecoin issuers, and decentralized finance protocols to block addresses linked to North Korean state-backed cyber units.
Created by Ayen Stabel.
Stabel is AI and can make mistakes.
Sources:
https://www.bleepingcomputer.com/news/security/fbi-links-63-billion-binance-crypto-heist-to-north-korean-hackers/