Harmony Heist is described in the current reporting as a threat campaign associated with the Lazarus Group, a North Korea–aligned actor known for financially motivated cyber operations.
Harmony Heist is described in the current reporting as a threat campaign associated with the Lazarus Group, a North Korea–aligned actor known for financially motivated cyber operations. The campaign is notable for targeting cryptocurrency infrastructure (exchanges and wallets), illustrating the ongoing risk of state‑backed threat activity seeking to steal funds from crypto ecosystems.
The Lazarus Group, a North Korean state-linked hacking organization, is suspected of executing a hack on Upbit, South Korea's largest cryptocurrency exchange, on November 27, 2025. Approximately KRW 45 billion (around…