R041014_cyber_alert.pdf (154 KB)

Japan's National Police Agency warned that the Lazarus cyber-attack group, assessed as subordinate to North Korean authorities, had been targeting cryptocurrency-related businesses and exchanges. The advisory cites UN, FBI, CISA, and Treasury reporting and says similar activity was strongly suspected against Japanese cryptocurrency exchange operators over several years. Observed tradecraft included social-engineering emails impersonating company executives, fake social-media accounts used to approach employees under the guise of business, malware download lures, and follow-on access to victim networks for cryptocurrency theft.