295
submitted 2 years ago by Domino@lemmings.world to c/world@quokk.au

The hackers stole more cryptocurrency in one attack than all the funds stolen by North Korean cyber criminals in 2024, when the rogue state’s cyber attackers made off with around $1.3bn in digital coins, according to cryptocurrency analysts Chainalysis.

top 50 comments
sorted by: hot top new old
[-] Rentlar@lemmy.ca 83 points 2 years ago

North Korea's GDP would technically be up 5% from this. Great success.

[-] someguy3@lemmy.world 4 points 2 years ago

Doesn't cagr though.

[-] HootinNHollerin@quokk.au 45 points 2 years ago

Looks like hexbear will be funded after all

[-] Zagorath@lemm.ee 5 points 2 years ago

You joke, but it looks like they actually did manage to regain their domain. Not sure how.

[-] IMALlama@lemmy.world 15 points 2 years ago
[-] nomy@lemmy.zip 8 points 2 years ago

I heard they just a bunch of crypto they forgot about.

[-] AES_Enjoyer@reddthat.com 3 points 2 years ago

Nah, hexbear admins and users were pretty clear and unanimous from minute 1 that they'd rather have that money spent in mutual aid (go visit c/mutual_aid in Hexbear if you're interested) than in giving money to a cyberlandlord.

[-] freamon@preferred.social 6 points 2 years ago

Last I read, the admin who was a day late in paying Sav for the renewal was actually able to transfer the domain to a different registrar (PorkBun) before Sav's auction of the domain was complete. This maneuver was either something that Sav's auction designers hadn't anticipated, or the auction was compromised because the main bidder (j_s_) was a hexbear user who'd found a way to make unauthenticated bids.

At any rate, I don't think they paid thousands for it.

load more comments (1 replies)
[-] GenosseFlosse@feddit.org 37 points 2 years ago

Isn't it only worth 1.5 billion if you manage to sell it? How would you liquidate this much crypto?

[-] nomy@lemmy.zip 42 points 2 years ago

Launder it and slowly sell it off through sock puppets.

They're a nation-state level actor, they have significant resources of their own and solid ties to both China and Russia, who are even more skilled and have even more resources.

[-] NoIdiots@lemmy.cafe 21 points 2 years ago

Say what you want about North Korea but they're the only one ballsy enough to take care of our right-wingers.

[-] __nobodynowhere@sh.itjust.works 17 points 2 years ago

Did Kim steal Musk's jacket?

[-] pelespirit@sh.itjust.works 15 points 2 years ago

First of all, I love that this is an AOL link. AOL is still around, eh?

Second, isn't crypto supposed to be trackable in the ledger? How are they hiding that much coin under a new name? That's the whole point of crypto.

[-] nao@sh.itjust.works 7 points 2 years ago

Why would they need to hide it?

load more comments (1 replies)
load more comments (2 replies)
[-] DarkCloud@lemmy.world 11 points 2 years ago

Oh I'm sure that'll settle things down. World peace can't be that far away!

[-] nomoredrama@lemmy.world 10 points 2 years ago

The article actually doesn't provide any proof it was North Korea. Why do they think it was North Korea?

[-] jagged_circle@feddit.nl 5 points 2 years ago

Probably Israel leaving clues to make it look like DPRK

[-] someguy3@lemmy.world 9 points 2 years ago* (last edited 2 years ago)

Agents from Pyongyang were able to breach the systems of Dubai-based exchange Bybit to steal the digital coin Ether, according to security analysts.

*More

Hackers gained access to Bybit’s internal systems using so-called “phishing” email, which prompted an employee to input their login details to a seemingly legitimate website that was actually compromised.

The hackers were then able to gain access to a so-called “cold wallet” – a supposedly secure cryptocurrency storage device that holds coins offline and away from the internet. When Bybit came to transfer funds from the offline wallet to its online systems, the hackers sabotaged the transfer and stole the funds.

[-] martinb@lemmy.sdf.org 3 points 2 years ago* (last edited 2 years ago)

So hot wallets?

No. From the article, phishing to get access to a cold wallet..

load more comments (1 replies)
[-] LainTrain@lemmy.dbzer0.com 9 points 2 years ago

Any technical juicy deets?

[-] Tar_alcaran@sh.itjust.works 5 points 2 years ago

They phished an employee and got cold-wallet access.

[-] jagged_circle@feddit.nl 8 points 2 years ago

Is this the cause of the dip?

[-] TacoButtPlug@sh.itjust.works 5 points 2 years ago

I'm sure Trump will give Kim high fives

[-] Tuxman@sh.itjust.works 2 points 2 years ago

Can’t people just stop trading that specific coin? Or just say it’s now worth 1$?

[-] CouncilOfFriends@slrpnk.net 2 points 2 years ago* (last edited 2 years ago)

This was a targeted attack against a cryptocurrency exchange. The specific crypto happened to be Ethereum (ETH), but more importantly the hackers were able to identify and target the specific employees needed for their multi-signature transactions, and infect their machines with malware to alter the user interface and show different destination wallet addresses. The exchange Bybit has offered a 10% bounty which could earn whitehats up to $140 million for any funds recovered, but I would be very surprised to see huge success with the use of mixers and such.

load more comments
view more: next ›
this post was submitted on 25 Feb 2025
295 points (98.7% liked)

World News

2454 readers
1000 users here now

Rules:
Be a decent person.
No racism, sexism, ableism, homophobia, transphobia, zionism/nazism, and so on.

Other Great Communities:

Rules

Be excellent to each other

founded 2 years ago
MODERATORS