The North Korean hacker group, known as the Lazarus Group, is once again under investigation by South Korean authorities. This follows the group’s alleged connection to the recent cyber-attack on Upbit, a prominent South Korean cryptocurrency exchange.
Background on the Upbit Attack
On November 27, 2019, Upbit reported a cyber intrusion that resulted in the loss of 342,000 ETH, which was equivalent to approximately $50 million at the time. The breach was discovered after abnormal transactions were detected from the exchange’s hot wallet to unknown wallets. In an attempt to safeguard other assets, Upbit transferred all cryptocurrencies from its hot wallet to a cold wallet.
Investigating the Lazarus Connection
Related: Upbit Fined for Failing to Implement Adequate KYC Measures
The South Korean police, in collaboration with cyber security firms, have been investigating the incident. Their findings suggest that the attack might have been orchestrated by the Lazarus Group. The Lazarus Group is infamously known for its alleged ties to North Korea and has been implicated in some of the most significant cyber attacks globally, including the Sony Pictures hack in 2014 and the WannaCry ransomware attack in 2017.
The investigators reported that viruses used in the Upbit hacking matched those used by the Lazarus Group in previous cyber attacks. The similarities in the malware code have led them to believe that the same group is behind the Upbit hack. However, no concrete evidence has been produced to directly link the Lazarus Group to the incident.
The Lazarus Group and Cybersecurity
The Lazarus Group’s alleged involvement in the Upbit hack has raised questions about the security measures employed by cryptocurrency exchanges. Despite the advancements in cybersecurity, hacking remains a significant concern for these platforms, with the potential to inflict substantial financial losses.
Related: North Korean Cyber Threat Bypasses Apple's Security Measures
In response to the growing threat posed by hackers, security experts recommend that exchanges implement robust security protocols, such as using cold storage for the majority of funds, employing multi-factor authentication, and regularly conducting security audits.
Upbit’s Response to the Hack
Following the hack, Upbit announced that it would cover the loss of the 342,000 ETH from its corporate funds, ensuring that customers would not be negatively affected. The firm also pledged to upgrade its security system to prevent such incidents from recurring. This suggests the firm’s commitment to maintaining user trust despite the setback.
The Future of Cybersecurity in Cryptocurrency Exchanges
As cyber attacks on cryptocurrency exchanges increase, there is a pressing need for more robust security measures. The reported connection of the Lazarus Group to the Upbit hack serves as a stark reminder of the cybersecurity threats faced by the cryptocurrency world.
While South Korean authorities continue their investigation into the Upbit hack, the incident underscores the need for ongoing vigilance and innovative solutions to protect against hacking attempts. It also necessitates a collaborative approach between exchanges, cybersecurity firms, and regulatory bodies to ensure the safety of digital assets.
The Upbit hack stands as a stark reminder that even with the most stringent security measures in place, no system is impervious to attacks. As such, the cryptocurrency community must keep evolving its security strategies to outpace the ever-growing threats posed by cybercriminals.