FBI reports that a North Korean group executed a $41 million stake hack.

19

FBI reports that a North Korean group executed a $41 million stake hack.

The $41 million breach of the crypto gambling platform Stake was executed by the North Korean Lazarus Group, as announced by the Federal Bureau of Investigation (FBI) on Sept. 7. This group has reportedly pilfered over $200 million in cryptocurrency throughout 2023, according to the announcement.

[JUST IN] FBI Identifies Lazarus Group Cyber Actors as Responsible for Theft of $41 Million from Stakehttps://t.co/Kq1tpjNuC5

— snailnews (@snailnews_) September 7, 2023

Stake is a cryptocurrency gambling site that provides casino games and sports wagering. It fell victim to a cyber intrusion on Sept. 4, resulting in the theft of more than $41 million in cryptocurrency from its hot wallets. The Stake team indicated that the hacker accessed only a minor portion of the funds and assured that users would remain unaffected.

In the FBI’s statement on Sept. 7, the agency reported that it has conducted an investigation and determined that the attack was executed by the Lazarus Group, a well-known cybercrime syndicate believed to be linked to the Democratic People’s Republic of Korea (DPRK), also referred to as “North Korea.”

The FBI provided the addresses where the stolen assets are currently stored, which are located on the Bitcoin, Ethereum, BNB Smart Chain, and Polygon networks. It advised all cryptocurrency protocols and businesses to scrutinize the addresses involved in the hack and refrain from engaging in transactions with them, stating:

“Private sector entities are encouraged to review the previously released Cyber Security Advisory on TraderTraitor and examine the blockchain data associated with the above-referenced virtual currency addresses and be vigilant in guarding against transactions directly with, or derived from, those addresses.”

Related: FBI flags 6 Bitcoin wallets linked to North Korea, urges vigilance in crypto firms

The agency also attributed the Alphapo, CoinsPaid, and Atomic Wallet breaches to Lazarus, noting that the cumulative losses from these incidents exceed $200 million that the group has stolen in 2023. Alphapo, a payment processor, experienced over $65 million in questionable withdrawals on July 23. CoinsPaid, another payment service provider, lost more than $37 million due to social engineering in late July. Additionally, Atomic Wallet users suffered a significant loss of $100 million in June due to an unidentified exploit.