HACKERS LAZARUS GROUP CHANGING MONEY LAUNDERING STRATEGY

A cybercrime group working on behalf of the North Korean government is now believed to have orchestrated the largest cryptocurrency hack of 2020.

The KuCoin hack of 2020 saw $275 million worth of crypto stolen from the exchange after hackers obtained access to the private keys of the exchange’s hot wallet.

The hackers, known as the Lazarus Group, have accounted for over $1.75 billion of stolen cryptocurrencies. According to Chainalysis, “We were able to attribute this hack to Lazarus Group due in part to the KuCoin hackers’ use of a specific money laundering strategy Lazarus has frequently used in the past.”

The money laundering strategy in question involves sending stolen funds to mixers in structured payments of the same size — usually an amount just below a round number in Bitcoin — that can be higher or lower depending on the size of the total amount to be laundered.

Once the funds are mixed, Lazarus Group then sends the funds to OTC brokers on one or a few exchanges across the globe. The report went on to add,

“This, along with other pieces of evidence we’re unable to share at this time, helped us identify Lazarus Group as the culprits.”

Interestingly, Chainalysis also found a shift in the Lazarus Group’s money laundering strategy. In 2020, the hackers’ use of DeFi platforms more than doubled, while their use of exchanges came down. The group is also increasing the number of unique cryptocurrency addresses under its control.