Lazarus集團加密黑客：從Bybit Exchange Hack到Ronin Bridge違規

由於加密貨幣以數字方式存儲，並且在轉換為菲亞特時經常以數百萬甚至數十億美元的價值估價，因此它已成為黑客的主要目標。

Cryptocurrency, being stored digitally and often valued in the millions or even billions when converted to fiat, has become a prime target for hackers. Since the bull run in 2017, the world has seen significant increases in token values, and the Lazarus Group has carried out multiple attacks on crypto entities.

加密貨幣被數字存儲，經常在菲亞特轉換為數百萬甚至數十億美元中，已成為黑客的主要目標。自2017年公牛奔跑以來，全世界的代幣價值觀顯著提高，而拉撒路集團對加密實體進行了多次攻擊。

This article aims to discuss the most popular attacks of the Lazarus Group in the crypto industry.

本文旨在討論加密貨幣行業中拉撒路集團最受歡迎的攻擊。

What is the Lazarus Group?

Lazarus團體是什麼？

The Lazarus Group is a North Korean state-backed hacking organization known for cyber espionage and financial crimes. Active since at least 2009, it is believed to operate under North Korea’s Reconnaissance General Bureau, the country’s main intelligence agency.

拉撒路集團是一個以網絡間諜和金融犯罪而聞名的朝鮮國家支持的黑客組織。至少從2009年起就活躍起來，據信它就在朝鮮偵察將軍局（該國的主要情報機構）的領導下運作。

Since 2018, North Korean hackers have deployed several forms of malware posing as legitimate cryptocurrency businesses. In addition to phishing, hackers use social networking to lure victims.

自2018年以來，朝鮮黑客部署了幾種形式的惡意軟件，以合法的加密貨幣業務。除了網絡釣魚外，黑客還使用社交網絡引誘受害者。

According to an article, Lazarus hackers reportedly receive state training and privileges, often working abroad to gain experience. Unlike Russian hacker groups that occasionally face government pressure, Lazarus operates recklessly with no fear of repercussions.

據一篇文章，據報導，拉撒路黑客接受州培訓和特權，經常在國外工作以獲得經驗。與偶爾面臨政府壓力的俄羅斯黑客團體不同，拉撒路魯ck行動，不擔心會產生影響。

How Does it Attack?

它如何攻擊？

The group is known for using sophisticated techniques to compromise computer systems and steal funds. They have been linked to several high-profile cyber-attacks, including the theft of $80 million from Bangladesh Bank in 2016.

該小組以使用複雜的技術來損害計算機系統並竊取資金而聞名。他們與幾個備受矚目的網絡攻擊有關，包括2016年從孟加拉國銀行盜竊了8000萬美元。

The hackers prefer to target cryptocurrency exchanges and DeFi protocols, aiming to steal large amounts of tokens. In several cases, Lazarus Group hackers impersonate recruiters to deceive job seekers.

黑客更喜歡針對加密貨幣交換和DEFI協議，旨在竊取大量令牌。在某些情況下，拉撒路集團黑客冒充招聘人員欺騙求職者。

Its main purpose is to generate revenue for the North Korean regime, which faces severe economic sanctions. The stolen cryptocurrency is then laundered through a complex network of mixers and tumblers.

其主要目的是為朝鮮政權產生收入，該政權面臨嚴重的經濟制裁。然後，通過複雜的混合器和不倒翁網絡將被盜的加密貨幣洗滌。

List Crypto Attacks by Lazarus Group

列出Lazarus Group的加密攻擊

Bybit Exchange Hack (2025)

Bybit Exchange Hack（2025）

Earlier this year, Chainalysis reported that North Korean hackers, likely from the Lazarus Group, stole $20 million from Bybit Exchange in 2025. The hackers infiltrated Bybit’s systems and stole user funds in BTC, ETH, and other tokens.

今年早些時候，Chainalysis報導說，可能來自Lazarus集團的朝鮮黑客在2025年從Bybit Exchange偷走了2000萬美元。黑客滲透了Bybit的系統，並在BTC，Eth和其他代幣中偷走了用戶資金。

CoinsPaid Hack (2023-2024)

Coinspaid Hack（2023-2024）

In 2023, the Lazarus Group carried out an advanced persistent threat (APT) attack on CoinsPaid, a crypto payment gateway.

2023年，拉撒路集團對加密支付網關Coinspaid進行了高級持久威脅（APT）攻擊。

CoinEx Hack (2023)

Coinex Hack（2023）

In August 2023, crypto exchange CoinEx confirmed a security breach that resulted in the theft of about $41 million in various tokens.

2023年8月，加密貨幣交易所Coinex確認了安全違規行為，導致盜竊約4100萬美元的各種代幣。

Atomic Wallet Hack (2023)

原子錢包黑客（2023）

Atomic Wallet, a popular cryptocurrency wallet provider, reported in July 2023 that hackers had stolen user funds.

流行的加密貨幣錢包提供商原子錢包在2023年7月報導說，黑客偷走了用戶資金。

Alphapo Hack (2023)

Alphapo Hack（2023）

This year, cybersecurity firm ESET reported that Lazarus Group hackers breached cryptocurrency platform Alphapo, stealing an estimated $60 million in crypto.

今年，網絡安全公司ESET報告說，Lazarus Group Hackers違反了加密貨幣平台Alphapo，竊取了估計的6000萬美元的加密貨幣。

Ronin Bridge Breach (2022)

羅寧橋違規（2022）

In March 2022, hackers breached the Ronin Network bridge, part of the Axie Infinity ecosystem, and stole around $625 million in ETH and other tokens.

2022年3月，黑客違反了Axie Infinity生態系統的一部分Ronin Network Bridge，並在ETH和其他代幣中偷走了約6.25億美元。

Harmony’s Horizon Bridge Hack (2022)

Harmony's Horizo​​n Bridge Hack（2022）

In October 2022, Harmony announced that its Horizon Chain bridge had been hacked, resulting in the theft of over $100 million in cryptocurrency.

2022年10月，Harmony宣布其Horizo​​n Chain Bridge已被黑客入侵，導致盜竊了超過1億美元的加密貨幣。

Stake.com Hack (2282)

Stake.com Hack（2282）

In November 2022, crypto gambling platform Stake.com disclosed a seven-figure seven-figure crypto theft from its platform.

2022年11月，加密賭博平台Stake.com從其平台揭示了七位數的七位數加密盜竊。

Non-Crypto Major Attacks

非克雷普託的重大攻擊

In 2014, the group was blamed for the cyber-attack on Sony Pictures Entertainment, which led to the release of unreleased copies of the movie "The Interview."

2014年，該組織被指責為索尼影業娛樂公司（Sony Pictures Entertainment）的網絡攻擊，這導致了電影《訪談》的未發行副本。

In 2020, it carried out an attack on Microsoft Exchange Server, which affected tens of thousands of organizations around the world.

在2020年，它對Microsoft Exchange Server進行了攻擊，該服務器影響了全球成千上萬的組織。

This article is published on BitPinas: Biggest Crypto Hacks by North Korea’s Lazarus Group

本文發表在BITPINAS：朝鮮Lazarus Group的最大加密黑客