Tagged: north korea

November 13, 2026 @ 11:47 am By Omar Faridi  |  

The Federal Bureau of Investigation (FBI) has issued a public alert regarding a sophisticated social engineering operation known as FaceStealer, which North Korean state-linked cyber operators have employed to siphon cryptocurrency and probe the open-source software ecosystem. The scheme exploits trust in familiar video-meeting tools… Read More

November 3, 2026 @ 6:51 am By Omar Faridi  |  

Kim Yo-jong, the sister of North Korean leader Kim Jong-un and a senior official, has dismissed U.S. claims that Pyongyang orchestrated the largest cryptocurrency theft on record—an estimated $6.3 billion to $6.4 billion drain of Binance hot wallets on October 29, 2026. In a statement… Read More

November 2, 2026 @ 7:56 am By Omar Faridi  |  

North Korean-linked actors have moved roughly $242 million of assets taken from Binance across the Tron network in just two days, according to on-chain analysis, while U.S. authorities press cross-chain protocols to block related activity and the exchange faces substantial customer outflows after restoring withdrawals…. Read More

November 2, 2026 @ 1:00 am By Omar Faridi  |  

North Korea-linked attackers drained approximately $6.36 billion from Binance wallets across ten blockchains in roughly 20 minutes on October 29, 2026, marking the largest cryptocurrency theft on record and pushing the regime’s cumulative haul since 2017 to about $12.8 billion. Blockchain analytics firm TRM Labs… Read More

October 30, 2026 @ 9:30 am By Omar Faridi  |  

On October 29, 2026, attackers drained an estimated (and unprecedented) $6.3 billion from Binance hot wallets across roughly nine to eleven blockchains in under four hours, with the bulk of the activity compressed into about 20 minutes. The exchange, the world’s largest by volume, confirmed… Read More

October 30, 2026 @ 7:54 am By Omar Faridi  |  

On October 29, 2026, Binance, the world’s largest cryptocurrency exchange by trading volume, suffered a security incident in which attackers drained roughly $6.3 billion to $6.36 billion in digital assets from its hot wallets across approximately ten blockchains. Blockchain analytics firms, including TRM Labs and… Read More

October 6, 2026 @ 8:57 am By Omar Faridi  |  

Blockchain investigator ZachXBT disclosed on October 5, 2026, that he spent weeks inside a Chinese organized crime network he says has moved more than $1 billion in stolen cryptocurrency for North Korea’s Lazarus Group across several exploits. In a 12-part thread on X, he described… Read More

September 18, 2026 @ 12:44 am By Omar Faridi  |  

North Korea has expanded a covert campaign to place information-technology staff inside American firms by recruiting people in third countries to help hide the true origin of job applicants, according to US officials and cybersecurity researchers. The effort previously relied heavily on stolen US identities… Read More

September 11, 2026 @ 1:25 pm By Omar Faridi  |  

On September 9, 2026, US authorities took action against Xinbi Guarantee, a Chinese-language marketplace investigators describe as a central hub for Southeast Asia’s industrial-scale online fraud economy. The Treasury Department’s Office of Foreign Assets Control (OFAC) listed the platform as a significant transnational criminal organization and also designated… Read More

September 7, 2026 @ 10:28 am By Omar Faridi  |  

Wallets tied to North Korea’s sanctioned Lazarus Group have been routing tens of millions of dollars through Hyperliquid, according to on-chain work first published by Arkham analyst Emmett Gallic. The finding lands just as the Trump administration is trying to pull the same derivatives venue… Read More

August 16, 2026 @ 2:15 pm By Omar Faridi  |  

Roman Storm, co-founder of the privacy-focused cryptocurrency protocol Tornado Cash, has directly challenged the legal reasoning behind his conviction by pointing to the widespread use of mainstream artificial intelligence tools by the same sanctioned actors the government cited in his case. In a post published… Read More

August 10, 2026 @ 5:38 pm By Omar Faridi  |  

Cybersecurity researchers have uncovered evidence that the North Korean threat actor known as Kimsuky is weaving artificial intelligence more deeply into its operations. The group, long associated with intelligence gathering and revenue-generating cyber activity for the regime, now appears to be experimenting with local large… Read More

August 9, 2026 @ 9:32 pm By Michael Wong  |  

Cryptocurrency exchange Bybit has filed a civil lawsuit against North Korea, its Reconnaissance General Bureau, and the Lazarus Group over a February 2025 cyberattack described by a U.S. court as “one of the largest cryptocurrency thefts in history.” The lawsuit was filed in the U.S…. Read More

August 9, 2026 @ 5:25 pm By Omar Faridi  |  

Bybit, one of the global cryptocurrency platforms, has taken significant legal steps against entities linked to a major digital asset heist. On August 7, 2026, the exchange announced a civil lawsuit filed in the US District Court for the District of Columbia. The defendants include… Read More

August 3, 2026 @ 4:27 am By Omar Faridi  |  

Authorities from the United States and a coalition of partner nations have issued a coordinated warning about the persistent dangers posed by skilled information technology specialists linked to North Korea. These individuals form an extensive network operating both inside the country and abroad, employing deceptive… Read More

May 15, 2026 @ 1:08 am By Omar Faridi  |  

Blockchain security firm CertiK has released its Skynet DPRK Crypto Threats Report, offering a rather concerning look at how North Korean-linked actors have turned digital asset theft into a streamlined, high-yield revenue engine for the regime. Covering nearly a decade of activity through early 2026,… Read More

May 4, 2026 @ 8:49 am By Omar Faridi  |  

North Korea has launched a forceful denial of international accusations linking it to large-scale cryptocurrency thefts, directing its ire at what it describes as “reptile media” alongside U.S. officials and allied groups. In an official statement released through state channels, a Foreign Ministry spokesperson dismissed… Read More

May 1, 2026 @ 1:00 pm By Omar Faridi  |  

Blockchain intelligence firm TRM Labs reports that groups tied to North Korea have seized a commanding share of cryptocurrency thefts early in 2026. By the close of April, these operations accounted for approximately 76 percent of all documented hack-related losses, pulling in about $577 million… Read More

April 3, 2026 @ 1:18 pm By Omar Faridi  |  

In arguably one of the most audacious cryptocurrency thefts of the year, attackers believed to be linked to North Korea siphoned approximately $285 million in user funds from Drift Protocol on April 1, 2026. TRM Labs pointed out that the operation, completed in roughly 12… Read More

March 16, 2026 @ 10:10 am By Omar Faridi  |  

TRM Labs noted that in a move intended to effectively curb illicit funding for North Korea’s weapons programs, the US Treasury’s Office of Foreign Assets Control (OFAC) has imposed sanctions on a web of facilitators tied to Pyongyang’s government-directed IT worker operations. According to insights… Read More