Lazarus Returned: Hackers Steal Crypto Via Telegram

Security researchers from Kaspersky Labs some time ago found out that the North Korean hacking gang Lazarus returned and it could be stealing cryptos through Telegram so let’s read more about it in the crypto news today.

North Korea is well-known as the most unpredictable and the most worrying nations throughout the world. Throughout the years it was seen that North Korea is constantly working on developing nuclear weapons and is working and funding a few other projects that pose a national security threat to other nations.

The developing efforts of North Korea were apparently slowed down as a consequence of the sanctions implemented by the US, nonetheless, the country recently began to develop certain interest in cryptocurrencies. Actually, it hosted a citizen of the USA, Virgil Griffith, from Singapore, to educate the nations serviceman about the technology and know-how of cryptocurrencies. This resulted in Griffith’s arrest as soon as he stepped on American soil, in November of 2019.

It looks like North Korean hackers, called the Lazarus returned and are targeting cryptocurrencies in their new crypto-pillaging campaign. According to a recent statement published by certain security researchers at Kaspersky, it seems that the Lazarus hang is amplifying its efforts to pillage cryptocurrencies as much as it can. But Kaspersky also found evidence that the Lazarus gang is utilizing more than one method and approaches in its latest offensive.

The group has attacked cryptos before, but now, its methodology and approach are changed. The members of the group are using more effective tactics and are more careful overall, as the report calls to caution. The group developed improved stealth methods and technology while it infected systems and took cryptocurrencies from them.

They do this by utilizing a malware that is not running on HDDs instead executes in memory which gives the opportunity of remaining undetected. Also, researchers think that the Lazarus gang is utilizing Telegram, because of its large cryptocurrency community. After the system is infected, the attackers can access it remotely and take the digital assets that are in the device. For now, researchers succeeded in identifying victims throughout Europe and China.  Also, for now, it is unknown how much the attackers have stolen during their new offensive.