The CoinsPaid Attack: A Fully Master-Planned Heist
A recent attack on cryptocurrency company CoinsPaid resulted in the theft of $37 million worth of cryptocurrency. The attack, which lasted six months, was likely carried out by the North Korean hacker group Lazarus. CoinsPaid advisor Evan Luthra described it as a “fully master-planned attack.”
Key Points:
- CoinsPaid’s $37 million was stolen in just 40 minutes.
- The attack was a fully master-planned operation that lasted six months.
- Top-tier hacker group Lazarus is suspected to be behind the attack.
- CoinsPaid faced previous attacks, including social engineering attempts and distributed denial of service attacks.
- The hacker group infiltrated CoinsPaid’s systems and found vulnerabilities.
According to Luthra, Lazarus had been monitoring CoinsPaid for six months and managed to infiltrate their systems during that time. The company experienced various attacks, including social engineering attempts, before the major attack took place. The hacker group accessed the firm’s infrastructure by tricking employees into installing malicious code through a test assignment carried out during job interviews.
This attack emphasizes the need for enhanced security measures in the crypto industry to protect against sophisticated hackers like Lazarus.
Hot Take: This attack on CoinsPaid highlights the ever-increasing need for robust cybersecurity measures in the cryptocurrency industry. Companies must remain vigilant and implement stringent security protocols to protect against sophisticated hacker groups like Lazarus.