ChainCatcher news, according to the Cyvers Alerts system monitoring, the Coinspaid hacker has once again obtained digital assets worth 1 million dollars, including 924,000 BSC-USD and 268.5 BNB. The total loss amount for Coinspaid has risen to 7.5 million dollars.

ChainCatcher message, according to Cyvers Alerts monitoring, Coinspaid has experienced multiple unauthorized transactions, with hackers stealing over $6.1 million in crypto assets, including 4.8 million USDT, 500 ETH, 97 million CPD, and 106,000 USDC. All CPD has been exchanged for ETH, and the remaining assets have been transferred to different EOA addresses, with some funds deposited into trading platforms such as MEXC, WhiteBIT, and ChangeNOW.

ChainCatcher news, the hacker group Lazarus Group stole $37 million from the Estonia-based crypto payment provider CoinsPaid through a 6-month social engineering attack. CoinsPaid stated that in March of this year, CoinsPaid's engineers received a list of questions regarding technical infrastructure, which came from a so-called "Ukrainian crypto processing startup." Between June and July, the engineers received fake job offers.CoinsPaid reported that on July 22, an employee thought they were interviewing for a lucrative job and downloaded malware as part of a so-called technical test. The hacker group had spent 6 months learning about CoinsPaid, including team members, the company's structure, and all possible details. When the employee downloaded the malicious code, the hackers were able to access CoinsPaid's systems and successfully forged authorization requests to extract funds from CoinsPaid's hot wallet.

ChainCatcher news, CoinsPaid has resumed processing transactions after service disruption due to a cyber attack on July 22. The company suspects that the attack was orchestrated by the North Korean hacker group Lazarus Group. Additionally, it stated that customer funds are safe, but the company's revenue has been affected.Previous projects that have been attacked by Lazarus include: Sony ($81 million), Axie Infinity ($625 million), Horizon Bridge ($100 million), Atomic Wallet ($100 million), and Alphapo ($60 million).In the coming weeks, CoinsPaid will organize a roundtable meeting with all Lazarus victims to announce a new initiative aimed at minimizing and preventing future attacks of this nature.

ChainCatcher message, SlowMist tweeted that the attackers of CoinsPaid, Atomic, and Alphapo may all be part of the North Korean hacker group Lazarus Group.SlowMist stated that the address starting with TGGMvM received nearly 120 million TRX transferred from the address starting with TJF7md related to the Alphapo incident, and the TGGMvM starting address also received funds from the Coinspaid hot wallet through addresses starting with TNMW5i and TJ6k7a on July 22. The address starting with TNMW5i had previously received funds from the address used by the Atomic attacker. (Source link)