North Korean Hackers Might Sell Almost 1,600 Stolen BTC: FBI

The Lazarus moved 1,580 BTC to six addresses which could be seen as the first step of a potential sale.

The US Federal Bureau of Investigation (FBI) discovered that the North Korean hacking collective – the Lazarus Group – has drained cryptocurrencies worth millions of dollars through several attacks in the past few years.

The security agency believes the wrongdoers could soon cash out 1,580 BTC (worth almost $41 million at current prices).

Stay Focused on the Lazarus’ Actions

The FBI released a statement to notify cryptocurrency companies about a potential move that the Lazarus (APT38) is about to make. 

According to the law enforcement organization, the North Korean hackers have transferred 1,580 of their BTC stash (generated through numerous thefts in the recent past) to six addresses. The FBI thinks this step is a sign of a future sale of those assets (currently worth around $40.8 million). 

“Private sector entities should examine the blockchain data associated with these addresses and be vigilant in guarding against transactions directly with, or derived from, the addresses. The FBI will continue to expose and combat the DPRK’s use of illicit activities—including cybercrime and virtual currency theft—to generate revenue for the regime,” the FBI alerted.

Lazarus has been connected to multiple crypto heists over the past few years, including one of the largest in the industry: the $600 million exploit of Ronin Bridge. The FBI maintained that the collective was also responsible for the $60 million theft of digital currencies from Alphapo in June this year and the breach of Harmony’s Horizon bridge in 2022, which resulted in losses worth $100 million.

The Lazarus Group: North Korea’s Cyber Weapon

The Pyongyang-led cybercrime organization has made the headlines not once or twice over the past decade. According to Wikipedia, the entity was established in 2009 for the purpose of cyberespionage. With the advancement of the cryptocurrency sector, the group shifted its focus, targeting exchanges and all kinds of platforms to drain digital assets from them.

The Lazarus hackers are well-trained to deploy malware of all types onto computer networks and servers. The Center for a New American Security (CNAS) warned last year that the group employs sophisticated techniques to steal and launder cryptocurrencies:

You may also like:

“This major intrusion included a range of sophisticated hacking and laundering techniques, including a professional mixing service and the use of new DeFi platforms in an attempt to obfuscate the activity.”

A White House official went further this year, alleging North Korea of funding 50% of its missile experiments via funds stolen by the Lazarus. The blockchain data platform – Chainalysis – estimated that the entity embezzled approximately $1.7 billion worth of crypto in 2022. 

Author icon

About the author

Dimitar got interested in cryptocurrencies back in 2018 amid the prolonged bear market. His biggest passion in the field is Bitcoin and he was fascinated with its journey. With a flair for producing high-quality content, he started covering the cryptocurrency space in late 2018. His hobby is football.