FBI has confirmed that North Korean hackers stole $1.5 billion from cryptocurrency exchange Bybit on Friday in the largest crypto heist recorded until now.

The Lazarus Group is a highly sophisticated, state-sponsored cyber threat group attributed to the North Korean government. They are also...

​Forensic investigators have found that North Korean Lazarus hackers stole $1.5 billion from Bybit after hacking a developer's device at the multisig wallet platform Safe{Wallet}.

Follow us on Bluesky, Twitter (X) and Facebook at @Hackread

Inside the Lazarus subgroup that’s hijacking cloud platforms, poisoning supply chains, and stealing billions in digital assets

Lazarus Group used PondRAT, ThemeForestRAT, and RemotePE in a 2024 DeFi attack, likely via Chrome zero-day.

Lazarus targets employees of a nuclear-related organization with a bunch of malware, such as MISTPEN, LPEClient, RollMid, CookieTime and a new modular backdoor CookiePlus.

North Korean threat actor Lazarus Group and its financially motivated subgroup APT38 (Bluenoroff) have conducted extensive cyberattacks targeting financial institutions worldwide, including the notabl...

Six malicious packages have been identified on npm (Node package manager) linked to the notorious North Korean hacking group Lazarus.

Lazarus Group's CookiePlus malware targets nuclear engineers, showcasing DPRK's evolving arsenal and $1.34B in 2024 crypto thefts.

North Korean Lazarus Group targets npm developers with brandjacking packages that mimic trusted tools, drop malware and put credentials at risk.

The US Treasury sanctioned a 3rd crypto mixer used by the Lazarus Group for alleged money laundering, adding it to the SDN list. #CryptoNews #USTreasury #LazarusGroup According to CryptoPotato.

Follow us on Bluesky, Twitter (X) and Facebook at @Hackread

when the target shows interest read more about Cross-Platform JavaScript Stealer Targets Crypto Wallets in New Lazarus Group Campaign

Infrastructure code has horrifyingly metamorphosed into a convenient snare for developer workstations. Cybersecurity firm Aikido recently unearthed malicious code deeply embedded within dual Terraform providers and twin Go modules. The company classifies this terrifying discovery as the inaugural documented instance of systematic malware distribution weaponizing the official Terraform Registry. The malicious providers, specifically designated as gocommunity-io/dockerd and kreuzwenker/docker, were surreptitiously published in early September.