Related Threat Clusters
-
Kimsuky Expands AI Capabilities for Cyberattacks
The North Korean hacking group Kimsuky has developed local AI tools to enhance its cyberattack capabilities, as reported by Genians Security Center on August 10, 2026. The group is utilizing large language models (LLMs)…
49 articles · Updated August 10, 2026 -
Crypto Theft Surge: $2.87 Billion Stolen in 2025 Amid Evolving Threat Landscape
In 2025, cryptocurrency thefts have surged significantly, with over $2 billion stolen in just the first half of the year, marking a 17.27% increase compared to 2022. The ByBit hack, attributed to North Korean state…
3 articles · Updated May 15, 2026 -
Drift Protocol Hack: $285M Stolen Funds Transferred After Months of Dormancy
In April 2026, the Drift Protocol was hacked, leading to a loss of approximately $285 million. The Ethereum wallet known as 'Drift Exploiter 4' began transferring these stolen funds on July 25, 2026, with significant…
2 articles · Updated July 26, 2026 -
Bybit Sues North Korea Over $1.5 Billion Crypto Theft
Bybit has filed a civil lawsuit against North Korea, its Reconnaissance General Bureau, and the Lazarus Group, accusing them of orchestrating a $1.5 billion hack in February 2025. The lawsuit, filed in the U.S. District…
23 articles · Updated August 8, 2026 -
North Korea's Lazarus Group Exploits Crypto Gaps, $6.75 Billion Stolen
In 2025 and the first half of 2026, North Korea's Lazarus Group has been a major threat in the cryptocurrency sector, responsible for approximately $6.75 billion in theft. The group has exploited vulnerabilities in the…
4 articles · Updated July 27, 2026 -
Bitrefill Cyberattack Linked to North Korea's Lazarus Group Exposes Customer Data
Bitrefill, a crypto e-commerce platform, disclosed a cyberattack that began on March 1, 2026, attributed to North Korea's Lazarus Group. The breach started with a compromised employee laptop, allowing attackers to…
8 articles · Updated March 17, 2026 -
Bybit Suffers $1.46 Billion Loss in North Korean Hacking Incident
On February 21, 2025, Bybit experienced a significant security breach involving a routine transfer from an Ethereum cold wallet to a warm wallet. The attack, attributed to North Korea's Lazarus Group, exploited the user…
2 articles · Updated August 9, 2026 -
North Korean IT Workers Infiltrate Major DeFi Protocols for Seven Years
Recent findings reveal that North Korean IT workers have been involved in the development of decentralized finance (DeFi) protocols for at least seven years. Cybersecurity researcher Taylor Monahan disclosed that over…
2 articles · Updated April 6, 2026 -
Bybit Hack: $1.5 Billion Theft by North Korean Hackers
In February 2025, a major hack on the Bybit cryptocurrency exchange resulted in the theft of $1.5 billion in Ethereum. The attack was attributed to the North Korean Lazarus Group's TraderTraitor subunit, exploiting a…
2 articles · Updated June 9, 2026 -
Velocity DEX Relaunches After $280 Million Hack Linked to Lazarus Group
Drift Protocol has rebranded as Velocity DEX following a significant exploit on April 1, 2026, where over $280 million was stolen. The attack was attributed to North Korea's Lazarus Group, which compromised multisig…
4 articles · Updated July 2, 2026
Recent Intelligence Reports
- Chrome Extension Malware Campaign Hits 19 Browser Add Ons — Coingabbar · August 29, 2026
- North Korean state-sponsored hackers — www.chainalysis.com · August 18, 2026
- North Korea's Kimsuky integrates AI into cyberattacks targeting crypto and finance — Theblock.Co · August 10, 2026
- Safe Ecosystem Foundation Statement — safe.global · August 10, 2026
- FBI attributed the theft — www.fbi.gov · August 10, 2026
- Bybit Security Incident Timeline — www.bybit.com · August 10, 2026
- Bybit Exploit Six Months On — www.elliptic.co · August 9, 2026
- Bybit Suffers 1 5 Billion Ethereum Heist In Cold Wallet Breach — cryptoslate.com · August 9, 2026