FBI、DC3 和日本 NPA 表示，朝鲜网络攻击者对 DMM.com 价值 3.08 亿美元的比特币盗窃案负有责任

该事件针对的是日本加密货币平台 DMM.com。它突显了旨在窃取数字资产的国家支持的网络犯罪日益增长的威胁。

The Federal Bureau of Investigation (FBI), Department of Defense Cyber Crime Center (DC3), and Japan’s National Police Agency (NPA) have attributed the $308 million Bitcoin (BTC) heist from DMM.com to North Korean cyber actors, also known as TraderTraitor, Jade Sleet, UNC4899, or Slow Pisces.

美国联邦调查局 (FBI)、国防部网络犯罪中心 (DC3) 和日本国家警察厅 (NPA) 将 DMM.com 价值 3.08 亿美元的比特币 (BTC) 盗窃案归咎于朝鲜网络犯罪分子，这些犯罪分子也被称为“朝鲜网络犯罪分子”。 TraderTraitor、Jade Sleet、UNC4899 或慢双鱼座。

The theft, which occurred in May 2024, was part of a larger campaign targeting Japanese crypto platforms. The incident highlights the increasing threat of state-sponsored cybercrime aimed at stealing digital assets.

这起盗窃事件发生在 2024 年 5 月，是针对日本加密货币平台的更大规模活动的一部分。该事件凸显了国家支持的旨在窃取数字资产的网络犯罪的威胁日益增加。

FBI’s Investigation Leads to North Korean Hackers

FBI 调查发现朝鲜黑客

The FBI’s investigation revealed that the cyberattack began in March 2024 with a reconnaissance phase. A North Korean cyber actor posed as a recruiter and contacted an employee of Ginco, a Japan-based crypto wallet software company.

FBI 的调查显示，网络攻击始于 2024 年 3 月，处于侦察阶段。一名朝鲜网络演员冒充招聘人员，联系了日本加密钱包软件公司 Ginco 的一名员工。

The attacker used LinkedIn to approach the employee and sent a false link claiming it was a pre-employment test. However, the link led to a Python script hosted on GitHub. Once downloaded, the script compromised the employee's system.

攻击者使用 LinkedIn 来接近该员工，并发送了一个虚假链接，声称这是一次就业前测试。然而，该链接指向托管在 GitHub 上的 Python 脚本。下载后，该脚本就会破坏员工的系统。

After gaining entry into the employee's system, the cyber actor exploited session cookie information, allowing them to impersonate the victim and gain further access to Ginco's insecure communications system.

在进入员工的系统后，网络攻击者利用会话 cookie 信息，使他们能够冒充受害者并进一步访问 Ginco 不安全的通信系统。

On May 11, 2024, the attacker manipulated a legitimate transaction request from a DMM employee, sending 4,502.9 BTC, valued at $308 million at the time, into wallets controlled by the hackers.

2024 年 5 月 11 日，攻击者操纵了 DMM 员工的合法交易请求，将 4,502.9 BTC（当时价值 3.08 亿美元）发送到黑客控制的钱包中。

The FBI report noted that the stolen funds were moved to wallets controlled by the TraderTraitor group, solidifying the connection between the cyber actor and the theft.

FBI 报告指出，被盗资金被转移到 TraderTraitor 组织控制的钱包中，从而巩固了网络攻击者与盗窃行为之间的联系。

Community Reacts to DMM Bitcoin Hack, WazirX Debate EnsuesAs news of the DMM Bitcoin hack spread, some crypto community members began comparing it to other high-profile crypto thefts, such as the WazirX hack.

社区对 DMM 比特币黑客攻击和 WazirX 争论随之而来随着 DMM 比特币黑客攻击的消息传播开来，一些加密社区成员开始将其与其他备受瞩目的加密货币盗窃事件进行比较，例如 WazirX 黑客攻击。

In response to an X article covering the DMM hack, Pushpendra Singh, founder of PushpendraTech and SmartViewAi, asked if the incident could justify other events. He highlighted the need to focus on user withdrawals in such cases.

在回应一篇涉及 DMM 黑客攻击的 X 文章时，PushpendraTech 和 SmartViewAi 的创始人 Pushpendra Singh 询问该事件是否可以证明其他事件的合理性。他强调在这种情况下需要关注用户提款。

“Bro this can’t justify wazirx hack. We have to focus on user withdrawal’s .”

“兄弟，这不能证明 wazirx 黑客攻击是合理的。我们必须关注用户退出问题。”

Meanwhile, Nischal Shetty, Co-Founder of WazirX, commented on the legal proceedings surrounding the crypto exchange's assets. He stated that creditors will be left to decide on the distribution of assets, especially in cases like the WazirX hack.

与此同时，WazirX 联合创始人 Nischal Shetty 对围绕加密货币交易所资产的法律诉讼发表了评论。他表示，资产分配将由债权人自行决定，尤其是在 WazirX 黑客事件等情况下。

“Creditors will have to decide on the asset distribution scheme. Especially in cases like ours. If majority votes in favor of a particular scheme then the liquid assets can be disbursed according to the terms of that scheme.”

“债权人将必须决定资产分配方案。尤其是像我们这样的情况。如果多数人投票支持某个特定计划，那么可以根据该计划的条款分配流动资产。”

The information presented in this article is for informational and educational purposes only. The article does not constitute financial advice or advice of any kind. Coin Edition is not responsible for any losses incurred as a result of the utilization of content, products, or services mentioned. Readers are advised to exercise caution before taking any action related to the company.

本文中提供的信息仅供参考和教育目的。本文不构成任何形式的财务建议或建议。对于因使用所提及的内容、产品或服务而造成的任何损失，Coin Edition 不承担任何责任。建议读者在采取任何与该公司相关的行动之前务必谨慎行事。