An FBI report dated September 6 said the North Korean organization Lazarus Group was responsible for the September 4 exploit of the online casino platform Stake, which resulted in the loss of approximately $41 million in cryptocurrency.
The Lazarus Group, better known as APT38, consists of agents who report to the Democratic People's Republic of Korea (DPRK). The Lazarus Group is often listed as a state-backed hacking group.
Law enforcement agencies identified 33 crypto addresses that received stolen funds. It lists four Ethereum (ETH) addresses, five Binance Smart Chain addresses, two Polygon addresses, and 22 (+BTC) bitcoins addresses.
The FBI did not provide details about the current status of the stolen money, such as whether it was sold for common currency or whether subsequent transactions were intercepted. Typically, exchanges and crypto platforms cooperate with law enforcement agencies in order to prevent the movement of stolen funds.
The FBI also confirmed earlier speculation about North Korean involvement. But the agency could not confirm that the attackers used an employment infiltration strategy previously described by crypto developer Taylor Monahan. He's also tayvano.
Lazarus is mostly targeting cryptocurrencies
As noted by the FBI, it is the Lazarus Group that is responsible for a number of previous attacks on crypto platforms. The group carried out attacks on the Horizon and Ronin bridges in June 2022, as well as attacks on bridges earlier.
As noted by law enforcement agencies, in 2019, the US Department of the Treasury's Office of Foreign Assets Control (OFAC) imposed sanctions against the Lazarus Group. There, the Department of Justice (DOJ) named Lazarus' use of the Tornado Cash coin mixer in its charges against the service's creators.