朝鲜网络战争对加密货币行业的攻击正在成熟

朝鲜注射的网络攻击范围从交流和社会工程尝试到网络钓鱼攻击和复杂的供应链劫持的范围

Crypto firm Paradigm has warned that North Korean cyberwarfare attacks on the cryptocurrency industry are "growing in sophistication and in the number of groups involved."

加密公司范式警告说，对加密货币行业的朝鲜网络战争攻击“在成熟和相关的群体数量中都在增长”。

In its report titled "Demystifying the North Korean Threat," Paradigm says that the attacks range from assaults on exchanges and social engineering attempts to phishing attacks and complex supply chain hijacks. In some cases, the attacks take a year to play out, with North Korean operatives biding their time.

Paradigm在其标题为“朝鲜威胁”的报告中说，袭击范围包括对交流和社会工程的袭击量到网络钓鱼攻击和复杂的供应链劫持。在某些情况下，攻击需要一年的时间才能进行，朝鲜特工筹集时间。

The United Nations estimates that between 2017 and 2023, North Korean hackers have netted the country $3 billion. The total haul has skyrocketed in 2024 and this year, with successful attacks against crypto exchange WazirX and Bybit, which together brought in around $1.7 billion for attackers.

联合国估计，在2017年至2023年之间，朝鲜黑客已向该国赚了30亿美元。全部拖船在2024年和今年猛增，对Crypto Exchange Wazirx和Bybit进行了成功的攻击，这些袭击共同为攻击者带来了约17亿美元的攻击。

According to the report, at least five main North Korean organizations are involved in cybercrime: Lazarus Group, Spinout, AppleJeus, Dangerous Password, and TraitorTrader. There is also a coalition of North Korean operatives who pose as IT workers, infiltrating tech companies around the world.

根据该报告，至少有五个主要的朝鲜组织参与了网络犯罪：Lazarus集团，Spinout，Applejeus，危险密码和WraitorTrader。还有一个由朝鲜特工组成的联盟，他们以IT工人的身份摆姿势，在全球渗透科技公司。

Lazarus Group, the most well-known North Korean hacking team, is credited with some of the most high-profile cyberattacks since 2016. The group hacked Sony and the Bank of Bangladesh in 2016 and helped orchestrate the WannaCry 2.0 ransomware attack in 2017.

Lazarus Group是最著名的朝鲜黑客攻击团队，以自2016年以来获得一些最引人注目的网络攻击。该集团于2016年入侵了Sony和孟加拉国银行，并帮助策划了2017年Wannacry 2.0 Ransomware Attact。

It has also taken aim at the cryptocurrency industry, sometimes to great effect. In 2017, the group hit two crypto exchanges — Youbit and Bithumb. In 2022, Lazarus Group exploited the Ronin Bridge, resulting in hundreds of millions in lost assets.

它还针对加密货币行业，有时会产生很大的影响。在2017年，该小组击中了两个加密交流 - Youbit和Bithumb。 2022年，拉撒路集团（Lazarus Group）利用了罗宁桥（Ronin Bridge），造成了数亿美元的资产损失。

And in 2025, it infamously stole $1.5 billion from Bybit, sending shock throughout the crypto community. The group may be behind some Solana meme coin scams.

在2025年，它臭名昭著地偷走了15亿美元的拜比特（Bybit），在整个加密货币社区中引起了震惊。该小组可能是一些Solana Meme硬币骗局的背后。

As Chainalysis and other organizations have explained, Lazarus Group also has predictable money laundering methods after securing a haul. It breaks up the stolen amount into smaller and smaller pieces, sending them to countless other wallets. It then swaps the more illiquid coins for those with higher liquidity and converts much of it to Bitcoin (BTC). After that, the group may sit on the stolen money for a long period of time until the attention from law enforcement dies down.

正如Chainalysis和其他组织所解释的那样，Lazarus Group在确保运输后也具有可预测的洗钱方法。它将被盗的数量分解为越来越小的碎片，将其发送到无数其他钱包。然后，它将流动性较高的人交换更多的流动硬币，并将其大部分转换为比特币（BTC）。此后，该组织可能会坐在被盗的钱上很长一段时间，直到执法部门的关注消失。

The FBI has so far identified three alleged members of the Lazarus Group, accusing them of cybercrimes. In February 2021, the US Justice Department indicted two of those members for involvement in global cybercrimes.

到目前为止，联邦调查局已经确定了拉撒路集团的三名涉嫌成员，指控他们进行了网络犯罪。 2021年2月，美国司法部起诉其中两名成员参与全球网络犯罪。