拉撒路集團利用龍捲風現金為洗衣

拉撒路集團（Lazarus Group）是與朝鮮相關的黑客集體，通過利用加密貨幣來繼續其非法活動。

A transaction of 400 ETH, roughly 750,000 dollars, was spotted heading towards Tornado Cash from an address identified by security firm CertiK as belonging to Lazarus Group, a North Korean hacking collective.

從安全公司Certik確定的地址屬於Lazarus Group，這是北朝鮮黑客集體的集體，從一個地址邁出了400張ETH，大約75萬美元的交易，約有75萬美元。

Known for exploiting crypto and pivoting towards software developers, the group is no stranger to illicit activities in the crypto sphere.

該小組因利用加密貨幣和向軟件開發人員的旋轉而聞名，對加密球體中的非法活動並不陌生。

Earlier this year, the group was seen attempting to steal 1.4 billion dollars from Bybit and later 29 million dollars from Phemex. However, both attempts were thwarted by the swift response of the exchange’s security teams.

今年早些時候，該組織試圖從拜比特（Bybit）竊取14億美元，後來從Phemex竊取了2900萬美元。但是，這兩種嘗試都因交易所安全團隊的迅速反應而挫敗了。

The fact that a transaction of this size is still being detected several months later highlights the difficulties faced by authorities in tracing and recovering stolen crypto funds.

幾個月後仍在發現這種規模的交易的事實突顯了當局在追踪和恢復被盜的加密基金方面所面臨的困難。

In five days, nearly 2.91 billion dollars is estimated to have flowed through this decentralized protocol, rendering any recovery attempt extremely complicated.

在五天內，估計將近29.1億美元通過該分散的協議流動，這使任何恢復嘗試變得極為複雜。

For several years, Lazarus has relied on various methods to evade authorities, such as exploiting mixers like Tornado Cash. These services, although legitimate for preserving the confidentiality of crypto transactions, are often diverted for criminal purposes.

幾年來，拉撒路一直依靠各種方法來逃避當局，例如利用龍捲風等攪拌機。這些服務雖然合理地保留了加密交易的機密性，但通常是出於犯罪目的而轉移的。

Earlier this year, the U.S. Treasury sanctioned Tornado Cash for its role in laundering at least 7 billion dollars in digital assets, a move that signaled increased efforts to crack down on illicit financial activities within the crypto space.

今年早些時候，美國財政部批准了龍捲風現金，因為其在洗錢至少70億美元的數字資產中的作用，這一舉動表明，越來越多的努力打擊了加密貨幣領域內的非法財務活動。

However, despite these efforts, hackers continue to find new ways to exploit vulnerabilities and steal crypto.

但是，儘管做出了這些努力，黑客仍在尋找新的方法來利用漏洞並竊取加密貨幣。

Recently, six new malwares created by Lazarus have been spotted on the Node Package Manager (NPM) platform, an essential service for managing JavaScript libraries used by web3 developers.

最近，在Node軟件包管理器（NPM）平台上發現了六個由Lazarus創建的新Malwares，這是管理Web3開發人員使用的JavaScript庫的重要服務。

Among them is the malicious software BeaverTail, which mimics popular libraries by slightly altering their names, a technique known as typosquatting. This allows hackers to deceive developers into installing malware instead of the intended library.

其中包括惡意軟件Beavertail，它通過稍微更改其名稱來模仿流行的庫，這是一種稱為Typosquatting的技術。這使黑客可以欺騙開發人員安裝惡意軟件，而不是預期的庫。

These malwares grant hackers access to sensitive data such as credentials stored in Chrome, Brave, and Firefox browsers, as well as Solana and Exodus wallets.

這些Malwares Grand Hackers訪問敏感數據，例如存儲在Chrome，Brave和Firefox瀏覽器中的憑證，以及Solana和Exodus Wallets。

Moreover, several crypto entrepreneurs have been targeted by fake Zoom invitations, where hackers pose as crypto investors and trick their victims into downloading infected files.

此外，虛假的Zoom邀請函的目標是幾位加密企業家，黑客成為加密投資者，並欺騙受害者下載受感染的文件。

According to Chainalysis, North Korean hackers have stolen 1.3 billion dollars in 2024, more than double that of the previous year. This increase highlights a persistent threat to the security of crypto assets.

根據鏈分析，朝鮮黑客在2024年偷走了13億美元，是上一年的兩倍以上。這增加了對加密資產安全的持續威脅。

The use of Tornado Cash and THORChain thus underscores the difficulties faced by authorities in tracing and blocking these funds. In the face of these repeated attacks, crypto developers and companies must strengthen their security measures to limit their exposure to cybercriminals.

因此，使用龍捲風現金和胸部強調了當局在追踪和阻止這些資金方面面臨的困難。面對這些反復攻擊，加密開發商和公司必須加強其安全措施，以限制其對網絡犯罪分子的影響。