BitMEX Outplays Lazarus Group in Failed Crypto Heist—Security Wins, Hackers Whine

Another day, another Lazarus Group attack foiled—this time by BitMEX’s security team. The exchange’s defenses spotted the North Korean-linked hackers’ sloppy op before they could siphon funds. Turns out even state-sponsored cybercriminals get lazy when targeting ’risky’ crypto exchanges.

Key takeaways:

- BitMEX’s real-time monitoring flagged suspicious wallet patterns

- Lazarus reused known attack vectors (rookie move)

- Zero customer funds lost—unlike some *cough* traditional banks *cough*

While Lazarus licks its wounds, crypto’s security infrastructure keeps leveling up. Maybe Wall Street’s firewall teams should take notes—or just keep outsourcing to Bangalore.

• BitMEX thwarts Lazarus Group’s social engineering attack.
• Investigation reveals flaws in Lazarus’ operational security.
• At least 10 accounts tied to the malware identified by BitMEX.

BitMEX, a top Bitcoin options trading platform, was able to stop a social engineering attack linked to the Lazarus Group. A BitMEX employee was approached by the North Korean hacking group through LinkedIn, who offered to collaborate on an NFT marketplace. The employee noticed the threat and informed the security team which stopped a possible damage.

BitMEX discovered that the attackers used the malicious code “BeaverTail,” which had been linked to Lazarus by Palo Alto’s Unit 42. The purpose of the code was to collect passwords and IP addresses from the victim’s computer. However, the attackers made a big operational error and failed to cover their original IP address.

The exchange was then able to build a program that tracked the attackers and found new weaknesses in their operation. Investigators found at least 10 accounts that were most likely created to test or develop the malware. The exchange pointed out that the group’s basic phishing was not consistent with their advanced exploitation techniques.

Lazarus Group Continues Attacks on Crypto Exchanges

The Lazarus Group has been a consistent threat to the cryptocurrency sector with many high-profile attacks. The Bybit hack in February is considered the biggest crypto hack ever recorded and is linked to the notorious group. However, BitMEX’s response shows that proactive steps in security are important in the crypto sector.

BitMEX’s security team reported that Lazarus appears to have divided into several groups with different levels of technical expertise. This division could be an attempt to increase the group reach and exploit various weaknesses. The BitMEX attack shows that even those with much experience can make errors when conducting a complex hack.

BitMEX Presses on Hackers As Coinbase and Others Feel the Heat

BitMEX’s fast response stopped further harm and painted a picture of Lazarus’ dynamic methods. The investigation continues, but the company has already identified where the group’s security failed. The investigative results can improve protection from similar attacks in the future.

This case comes after a data breach at Coinbase which let out customer data and could result in big financial losses. The breach has pointed out the need for better cybersecurity in the cryptocurrency space. These events show that exchanges are still at risk, especially because groups like Lazarus are becoming more advanced.

The attack underscores the persistent risks of hacking in the crypto industry.

Related Reading | Cardano (ADA) Price Prediction: $7 Target Possible If crypto market Hits $10 Trillion