ChainCatcher news, according to Cointelegraph, cybersecurity experts warn that the notorious North Korean hacking group "Lazarus Group" may target the U.S. Bitcoin ETF as a new attack vector. Michael Pearl, Vice President of GTM Strategy at Cyvers, stated that hackers might turn their attention to the U.S. Bitcoin ETF due to the potential for massive returns.According to Dune data, U.S. ETFs currently hold Bitcoin worth $52.1 billion, making it an enticing target for hackers. Pearl warned that not only ETF providers could become targets, but all companies associated with them would also face risks, making ETF vulnerabilities a pressing issue that needs to be addressed quickly, or else a "super hacker" incident could occur.

ChainCatcher news, Arkham posted on X platform stating that in April this year, ZachXBT published the investigation results on the activities of the North Korean hacker group Lazarus Group. He supplemented the data of this investigation with the entity addresses marked on the Arkham platform, and an additional 7 addresses hold 891.13 bitcoins, worth 63.23 million dollars.Previous news, ZachXBT claimed that Lazarus Group has laundered 200 million dollars of stolen cryptocurrency into fiat currency over four years.

ChainCatcher news, the on-chain analysis agency X-explore posted on social media stating that it believes the reason for the attack on Poloniex is the leakage of private keys, and the attackers are the Lazarus Group.It is reported that this attack is similar to the attack on Stake.com on September 4, 2023, where hackers stored different tokens in different addresses, with each address handling only one type of token.

ChainCatcher news, FixedFloat stated on social media that after three days of coordination efforts by the team, they successfully thwarted a money laundering attempt related to the North Korean hacker group Lazarus, with a total of approximately 2 million dollars in frozen funds.

According to ChainCatcher news and reported by Yonhap News Agency, over the past year, the North Korean hacker group Lazarus Group has laundered more than $900 million (approximately 1.2 trillion won) in cryptocurrency through cross-chain bridges, accounting for about one-seventh of the total amount laundered through cross-chain bridges in the past year ($7 billion).

ChainCatcher message, ESET security researchers discovered an undocumented backdoor named LightlessCan while analyzing an attack against a Spanish aerospace company. LightlessCan is new malware from the North Korean hacking group Lazarus Group that can now bypass detection, and it has been using a new type of "sophisticated" malware as part of its fake job scheme.

ChainCatcher news, according to Cointelegraph, based on data from 21Shares' parent company 21.co on Dune Analytics, wallets associated with the North Korean hacker group Lazarus Group currently hold digital assets worth approximately $47 million, including $42.5 million in Bitcoin, $1.9 million in Ethereum, $1.1 million in BNB, and $640,000 in stablecoins.

ChainCatcher news, according to PeckShield monitoring, Balancer front-end attackers converted approximately 14.5 Ethereum into about 0.868 Bitcoin through THORChain. The Bitcoin received at the address starting with bc1qt8 was transferred to the address starting with bc1q2h, which has interacted with the Bitcoin address starting with bc1q94 used by the previous Stake.com attackers to transfer assets.Previously, the Federal Bureau of Investigation (FBI) identified the Lazarus Group as responsible for the Stake.com attack incident.

ChainCatcher message, SlowMist found during the analysis of the CoinEx attack incident that the CoinEx hacker may be associated with the North Korean hacker group Lazarus Group, with specific connections as follows:The known Alphapo Exploiter (TDrs...WVjr) exchanged TRX for ETH through TransitSwap and cross-chained to the address (0x22be3b0a943b1bc0ea3aec2cb3ef511f3920a98d), thus this address is also marked as Alphapo Exploiter on Ethereum;The hacker address 0x22be3b0a943b1bc0ea3aec2cb3ef511f3920a98d is marked as Alphapo Exploiter on Ethereum and as Stake.com Exploiter on BNB Chain, indicating that this address is a shared address;0x75497999432B8701330fB68058bd21918C02Ac59 is marked as CoinEx Exploiter on Arbitrum and OP Mainnet, and as Stake.com Exploiter on Polygon, indicating that this address is a shared address.Since the Stake.com Exploiter has been linked by the FBI to the North Korean hacker group Lazarus Group, it is possible that the Alphapo Exploiter, Stake.com Exploiter, and CoinEx Exploiter are all part of the North Korean hacker group Lazarus Group.

ChainCatcher message, SlowMist tweeted that the attackers of CoinsPaid, Atomic, and Alphapo may all be part of the North Korean hacker group Lazarus Group.SlowMist stated that the address starting with TGGMvM received nearly 120 million TRX transferred from the address starting with TJF7md related to the Alphapo incident, and the TGGMvM starting address also received funds from the Coinspaid hot wallet through addresses starting with TNMW5i and TJ6k7a on July 22. The address starting with TNMW5i had previously received funds from the address used by the Atomic attacker. (Source link)

ChainCatcher news reports, citing information provided by the National Police Agency (NPA) of Japan, that several cryptocurrency exchanges in Japan have been targeted by cyberattacks initiated by the North Korean hacker group Lazarus Group. Employees of the attacked companies were tricked into opening phishing emails sent by the hackers, resulting in their computers ultimately being infected with viruses.It is reported that Lazarus is a North Korean hacker organization that has been involved in several cryptocurrency attacks, including those on Ronin and KuCoin, and is skilled in social engineering attacks. (Source link)