All You Need to Know about North Korean Crypto Hackers: The Lazarus Group
2024-04-18 • Nefture •
The article profiles Lazarus Group as a North Korean state-sponsored hacking organization linked to the Reconnaissance General Bureau and aliases such as APT38 and Hidden Cobra. It traces the group from early disruptive operations, including Sony Pictures and WannaCry, into financially motivated cryptocurrency theft against exchanges, bridges, and Web3 projects. The source emphasizes social engineering as a core method, citing fake job offers and phishing as routes to private-key compromise, including the Ronin Bridge heist. It also describes typical Lazarus tactics such as spear phishing, watering holes, droppers, backdoors, zero-day exploitation, and laundering techniques used to turn stolen crypto into regime revenue.