一场复杂的网络攻击导致Scroll联合创始人叶晨的X账户遭入侵，黑客冒充平台工作人员发起钓鱼攻击，目标锁定多位知名加密货币人士。

朝鲜在 2025 年创下了加密货币盗窃的新纪录，通过日益复杂的网络行动共窃取了数十亿美元，这凸显了数字资产犯罪已深深融入朝鲜政权的国家战略。

朝鲜黑客正在利用虚假视频通话和劫持账户诱骗加密货币用户安装恶意软件。这些攻击使他们能够完全控制设备，从而窃取加密货币钱包，并通过信任的联系人传播骗局。

South Korea’s largest crypto exchange, Upbit, has reported a $36 million exploit on the Solana network, a breach that unfolded with unsettling precision on November 27 — the exact date the platform suffered its notorious 2019 hack, when 342,000 ETH were siphoned by North Korea’s Lazarus Group.

The U.S. Department of Justice has intensified its pursuit of North Korea’s state-backed hacking operations, launching a major forfeiture action against $15.1 million in stolen Tether (USDT) while simultaneously securing guilty pleas from five individuals who helped Pyongyang’s operatives embed themselves deep inside America’s corporate infrastructure.

Binance founder Changpeng “CZ” Zhao appears to have become the latest target in what experts describe as a state-backed retaliation campaign by North Korea’s notorious hacking unit, the Lazarus Group.

North Korea-linked hackers have stolen over $2 billion in cryptocurrency in 2025, including a $1.46 billion breach of Bybit and multiple attacks on smaller platforms. They are increasingly targeting wealthy individuals using scams and social engineering, while laundering stolen funds through complex methods to avoid detection.

A North Korea-linked group used AI to create a fake South Korean military ID and launch a phishing campaign targeting journalists, researchers, and human rights workers. The attack highlights the growing use of AI in cyber-espionage, with authorities warning of increased risks and urging stronger security measures.

Binance’s Chief Security Officer, Jimmy Su, has named the North Korean hacking group Lazarus as the company’s single biggest security threat, as the exchange continues to fend off persistent infiltration attempts from the country.

An Arizona-based TikTok influencer has been sentenced to eight and a half years in federal prison for helping North Korean operatives infiltrate U.S. tech and cryptocurrency firms using stolen identities and fraudulent documents.