An advertisement of South Korea’s largest crypto exchange Upbit is put up at a subway station after the company suffered massive losses from a suspected hacking attack by North Korea-backed Lazarus, Seoul, Friday. Yonhap
North Korean hacking group Lazarus is suspected to have been behind at least 31 cyberattacks over the past year, a report showed Sunday, amid mounting speculation that the group was responsible for a recent massive cryptocurrency breach at South Korean crypto exchange Upbit.
AhnLab, a local software security firm, made the assessment in its latest report, saying Lazarus topped the list of advanced persistent threat (APT) groups with 31 incidents from October 2024 to September this year.
Another North Korea-backed group, Kimsuky, followed with 27 cases, the same data showed.
By country, North Korea accounted for 86 hacking incidents, followed by China at 27, Russia and India at 18 each, and Pakistan with 17.
AhnLab noted that the actual number of attacks could be higher than disclosed due to the sophisticated methods used by APT groups.
The report comes amid suspicions that Lazarus was behind a breach that drained around 45 billion won ($30.6 million) worth of cryptocurrency from Upbit last week.
Authorities said the techniques used in the latest heist were similar to those employed in a 2019 attack in which the group allegedly stole 58 billion won worth of Ethereum from Upbit.
