- BitMEX thwarts Lazarus Group’s social engineering attack.
- Investigation reveals flaws in Lazarus’ operational security.
- At least 10 accounts tied to the malware identified by BitMEX.
BitMEX, a top Bitcoin options trading platform, was able to stop a social engineering attack linked to the Lazarus Group. A BitMEX employee was approached by the North Korean hacking group through LinkedIn, who offered to collaborate on an NFT marketplace. The employee noticed the threat and informed the security team which stopped a possible damage.
BitMEX discovered that the attackers used the malicious code “BeaverTail,” which had been linked to Lazarus by Palo Alto’s Unit 42. The purpose of the code was to collect passwords and IP addresses from the victim’s computer. However, the attackers made a big operational error and failed to cover their original IP address.
The exchange was then able to build a program that tracked the attackers and found new weaknesses in their operation. Investigators found at least 10 accounts that were most likely created to test or develop the malware. The exchange pointed out that the group’s basic phishing was not consistent with their advanced exploitation techniques.
Lazarus Group Continues Attacks on Crypto Exchanges
The Lazarus Group has been a consistent threat to the cryptocurrency sector with many high-profile attacks. The Bybit hack in February is considered the biggest crypto hack ever recorded and is linked to the notorious group. However, BitMEX’s response shows that proactive steps in security are important in the crypto sector.
BitMEX’s security team reported that Lazarus appears to have divided into several groups with different levels of technical expertise. This division could be an attempt to increase the group reach and exploit various weaknesses. The BitMEX attack shows that even those with much experience can make errors when conducting a complex hack.
BitMEX Presses on Hackers As Coinbase and Others Feel the Heat
BitMEX’s fast response stopped further harm and painted a picture of Lazarus’ dynamic methods. The investigation continues, but the company has already identified where the group’s security failed. The investigative results can improve protection from similar attacks in the future.
This case comes after a data breach at Coinbase which let out customer data and could result in big financial losses. The breach has pointed out the need for better cybersecurity in the cryptocurrency space. These events show that exchanges are still at risk, especially because groups like Lazarus are becoming more advanced.
The attack underscores the persistent risks of hacking in the crypto industry.
Related Reading | Cardano (ADA) Price Prediction: $7 Target Possible If Crypto Market Hits $10 Trillion
