How North Korea Pulled Off the $1.5B Bybit Hack—Crypto’s Biggest Heist
Last week, news outlets worldwide reported that North Korea orchestrated the theft of $1.5 billion in digital tokens from cryptocurrency exchange firm Bybit. However, this isn’t just another crypto hack. The cyberattack is considered the biggest crypto heist ever. The situation adds to the growing list of serious concerns about the security of digital assets and the increasingly sophisticated tactics of state-sponsored cybercriminals. How did North Korea pull this off? According to reports, the North Korean hackers are believed to be part of the notorious Lazarus group, making this the third attack attributed to them in six months and bringing their grand total of stolen crypto to $3 billion. Lazarus employed a series of highly advanced techniques with several key components. But how did this massive breach unfold? Phase one: phishing First, it is suspected that the malicious actors likely conducted targeted phishing campaigns, known as spear phishing, against key personnel. This allowed the cybercriminals to steal sensitive information and access Bybit’s user interface and cold wallet signers. For those unfamiliar with cold and hot wallets: A …
