Ozys Alleges Former CISO Weakened Firewall Before Hack
Ozys, the South Korean blockchain technology company that experienced an $81.5 million hack on its cross-chain protocol Orbit Bridge, has alleged in a blog post that its former chief information security officer (CISO) deliberately weakened the company’s firewall before the breach occurred. The company has not disclosed the name of the former employee.
Lawsuit Filed and Police Investigation Requested
Ozys has filed a lawsuit against its former CISO seeking damages and has also submitted a petition to local police, requesting an investigation into the former employee’s possible involvement in the hack. South Korean news agency News1 reported on Thursday that the company is taking legal action.
Changes Made to Firewall and Unauthorized Access
Ozys alleges that the former security chief made changes to the internal firewall on November 22, two days after requesting voluntary resignation. The employee allegedly left the company without notifying them about the changes made to the security settings, which Ozys only discovered on January 10. On January 1, an “unidentified access” sent millions of dollars worth of cryptocurrencies to new wallets.
Possible Involvement of Lazarus Hacker Group
Ozys is also investigating the possibility of North Korea-backed hacker group Lazarus’ involvement in the hack and has alerted the National Intelligence Service. The company is collaborating with cybersecurity firm Theori, South Korean police, and the Korea Internet & Security Agency to investigate further.
Commitment to Asset Recovery
Ozys CEO Choi Jin-han stated that they will mobilize all resources to track down the attacker and freeze and recover the seized assets. The company will update users with a recovery plan as soon as one is available. Ozys has not provided further details or comments in response to requests for more information from The Block.
Hot Take: Ozys Takes Action Against Former CISO Following $81.5 Million Hack
Ozys, a South Korean blockchain company, is taking legal action against its former chief information security officer (CISO) after suffering an $81.5 million hack on its cross-chain protocol Orbit Bridge. The company alleges that the former CISO deliberately weakened the firewall before the breach occurred and has filed a lawsuit seeking damages. They have also requested a police investigation into the former employee’s potential involvement in the hack. Ozys is working with cybersecurity experts, law enforcement agencies, and intelligence services to identify the attacker and recover the seized assets. The company remains committed to updating users with a recovery plan.
By
By
By
By
By
By