Connect with us

Foreign News

North Korean hackers cash out hundreds of millions from $1.5bn ByBit hack

Published

on

Hackers thought to be working for the North Korean regime have successfully cashed out at least $300m (£232m) of their record-breaking $1.5bn crypto heist.

The criminals, known as Lazarus Group, swiped the huge haul of digital tokens in a hack on crypto exchange ByBit two weeks ago.

Since then, it’s been a cat-and-mouse game to track and block the hackers from successfully converting the crypto into usable cash.

Experts say the infamous hacking team is working nearly 24 hours a day – potentially funnelling the money into the regime’s military development.

“Every minute matters for the hackers who are trying to confuse the money trail and they are extremely sophisticated in what they’re doing,” says Dr Tom Robinson, co-founder of crypto investigators Elliptic.

Out of all the criminal actors involved in crypto currency, North Korea is the best at laundering crypto, Dr Robinson says.

“I imagine they have an entire room of people doing this using automated tools and years of experience. We can also see from their activity that they only take a few hours break each day, possibly working in shifts to get the crypto turned into cash.”

Elliptic’s analysis tallies with ByBit, which says that 20% of the funds have now “gone dark”, meaning it is unlikely to ever be recovered.

The US and allies accuse the North Koreans of carrying out dozens of hacks in recent years to fund the regime’s military and nuclear development.

On 21 February the criminals hacked one of ByBit’s suppliers to secretly alter the digital wallet address that 401,000 Ethereum crypto coins were being sent to.

ByBit thought it was transferring the funds to its own digital wallet, but instead sent it all to the hackers.

Getty Images Ben Zhou, ByBit CEO
ByBit CEO Ben Zhou is hoping to reclaim some of the stolen funds through a bounty project [BBC]

Ben Zhou, the CEO of ByBit, assured customers that none of their funds had been taken.

The firm has since replenished the stolen coins with loans from investors, but is in Zhou’s words “waging war on Lazarus”.

ByBit’s Lazarus Bounty programme is encouraging members of the public to trace the stolen funds and get them frozen where possible.

All crypto transactions are displayed on a public blockchain, so it’s possible to track the money as it’s moved around by the Lazarus Group.

If the hackers try to use a mainstream crypto service to attempt to turn the coins into normal money like dollars, the crypto coins can be frozen by the company if they think they are linked to crime.

So far 20 people have shared more than $4m in rewards for successfully identifying $40m of the stolen money and alerting crypto firms to block transfers.

But experts are downbeat about the chances of the rest of the funds being recoverable, given the North Korean expertise in hacking and laundering the money.

“North Korea is a very closed system and closed economy so they created a successful industry for hacking and laundering and they don’t care about the negative impression of cyber crime,” Dr Dorit Dor from cyber security company Check Point said.

Another problem is that not all crypto companies are as willing to help as others.

Crypto exchange eXch is being accused by ByBit and others of not stopping the criminals cashing out.

More than $90m has been successfully funnelled through this exchange.

But over email the elusive owner of eXch – Johann Roberts – disputed that.

He admits they didn’t initially stop the funds, as his company is in a long-running dispute with ByBit, and he says his team wasn’t sure the coins were definitely from the hack.

He says he is now co-operating, but argues that mainstream companies that identify crypto customers are abandoning the private and anonymous benefits of crypto currency.

FBI Park Jin Hyok
Park Jin Hyok is one of the alleged Lazarus Group hackers

North Korea has never admitted being behind the Lazarus Group, but is thought to be the only country in the world using its hacking powers for financial gain.

Previously the Lazarus Group hackers targeted banks, but have in the last five years specialised in attacking cryptocurrency companies.

The industry is less well protected with fewer mechanisms in place to stop them laundering the funds.

Recent hacks linked to North Korea include:

  • The 2019 hack on UpBit for $41m
  • The $275m theft of crypto from exchange KuCoin (most of the funds were recovered)
  • The 2022 Ronin Bridge attack which saw hackers make off with $600m in crypto
  • Approximately $100m in crypto was stolen in an attack on Atomic Wallet in 2023

In 2020, the US added North Koreans accused of being part of the Lazarus Group to its Cyber Most Wanted list. But the chances of the individuals ever being arrested are extremely slim unless they leave their country.

[BBC]



Continue Reading
Advertisement
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Foreign News

Escaped tiger shot by German police after attacking man

Published

on

By

Local media say the tiger belongs to controversial trainer Carmen Zander, also known as Germany's "Tiger Queen" [BBC]

An escaped tiger believed to be owned by Germany’s “Tiger Queen” has been shot dead by police after attacking one of its keepers.

Police told the BBC a 72-year-old man was seriously injured after being attacked on Sunday while he was inside the animal’s enclosure, located in a privately-owned facility on the outskirts of the German city of Leipzig.

The tiger escaped the enclosure and was found shortly after by armed police, who shot and killed the animal.

The site of the enclosure is believed to be owned by controversial trainer and private owner Carmen Zander, who describes herself as Germany’s “Tiger Queen”.

The animal was one of eight big cats kept at the industrial site near the German town of Schkeuditz, according to local media.

In a statement to the BBC, police said officers shot the animal, a male tiger, to eliminate any further risk to the public.

It added that the local police department received the emergency call at around 12:50 local time (11:50 BST) on Sunday, with officers arriving at the scene quickly.

A spokesperson said how the tiger escaped is part of an ongoing investigation.

No other animals have escaped from the site and police have planned a drone search to ensure it is fully secure.

District Mayor Thomas Druskat called for the other animals to be relocated and told local media it was “unthinkable” what could have happened if anyone else had been harmed.

Nearby residents told the Deutsche Presse-Agentur (DPA) that the incident was “terrible and worrying”, with one claiming the animals were not kept in appropriate conditions.

Animal rights charity Peta called on the government to act, telling DPA that stricter rules needed to be put in place to protect privately-owned animals.

AFP via Getty Images A woman kisses a tiger on stage
“Tiger Queen” Zander performing with one of her big cats at a circus festival in 2018 [BBC]

According to a website using Zander’s name and nickname, the trainer holds “unforgettable” and “one-of-a-kind” tiger petting events open to the public.

The website says visitors can pay to pet the “250kg powerhouses” at a site near Leipzig.

Another section of the website features the pictures of eight tigers – three which appear to have died in the last nine years. The tigers include 190kg Kiara, 20-year-old Aschanti, and two-year-old cub Imana.

Social media posts appearing to be from the trainer show several pictures of the tigers playing in the enclosures.

It also says the tigers are looked after and kept healthy in an animal-friendly environment.

The BBC has reached out to Zander for comment.

[BBC]

Continue Reading

Foreign News

Rescue diver dies during search for bodies of Italians who drowned in Maldives caves

Published

on

By

Mohamed Mahdhee [BBC]

A rescue diver has died while searching for the bodies of a group of Italians who died in a scuba-diving accident in the Maldives.

Staff Sgt Mohamed Mahdhee was taken to hospital in critical condition and later succumbed to his injuries, a government spokesman told the BBC on Saturday.

Five Italians died while attempting to explore caves at a depth of around 50m (164ft) on Thursday. So far, the body of one of them is thought to have been recovered, in a cave at a depth of around 60m (197ft).

The incident is believed to be the worst single diving accident in the tiny Indian Ocean nation, a popular tourist destination because of its string of coral islands.

Maldivian President Mohamed Muizzu travelled to Vaavu Atoll on Saturday to observe the search operations.

“Eight rescue divers went into the water today. When they surfaced, they realised  Mahdhee didn’t come up,” Mohamed Hossain Shareef, a Maldivian government spokesman told the BBC.

The other divers immediately went into the water again and they found Mahdhee had blacked out.

The Maldives military has described the operation as very high risk, with unfavourable weather conditions.

Italian Foreign Minister Antonio Tajani sent condolences: “These days of grief for Italy are compounded by the news that one of your brave soldiers… died while attempting to dive to reach the bodies of our fellow Italians.”

“This tragedy unites Italy and the Maldives in grief and respect for the victims,” he added.

Instagram/University of Genoa/Albatros Top Boat Two women and a man on the right - a composite image of three of the victims of a diving tragedy in Italy
Among the five who died were Giorgia Sommacal (L), her mother Monica Montefalcone (C) and diving instructor Gianluca Benedetti [BBC]

Four of the Italian divers were part of a University of Genoa team, including professor of ecology Monica Montefalcone, her daughter and two researchers. The fifth was a boat operations manager and diving instructor.

The five entered the water at Vaavu Atoll on Thursday morning, local media said, and were reported missing when they failed to resurface later on.

Police said the weather was rough in the area, about 100km (62 miles) south of the capital, Male. A yellow warning was issued for passenger boats and fishermen.

Shareef said recreational scuba divers were only allowed to dive up to a depth of 30m and it was not clear why the Italians went into a cave that’s 60m under water.

Italy’s foreign ministry said earlier that another 20 Italian nationals aboard the Duke of York yacht, from which the five divers took off, were unharmed and receiving assistance from the Embassy of Italy in Colombo, Sri Lanka

[BBC]

Continue Reading

Foreign News

At least eight killed, 35 injured as train hits bus in Bangkok

Published

on

By

Emergency services work at a site where a train collided with a bus and several cars on Asok-Din Daeng Road, causing several casualties, in Bangkok, Thailand, May 16, 2026. [Aljazeera]

At least eight people have been killed, and dozens injured, after a freight train crashed into a public bus in Thailand’s capital.

Flames engulfed the bus and nearby vehicles near an airport rail link station in the centre of Bangkok Saturday afternoon.

The city’s emergency services Erawan Medical Center confirmed the number of deaths, while Bangkok police chief Urumporn Koondejsumrit told AFP news agency at least 35 people were injured.

Speaking to reporters at the scene, Deputy Transport Minister Siripong Angkasakulkiat said that all the bodies were found on the bus. It was not yet clear how many people were on board in total.

Prime Minister Anutin Charnvirakul ordered an investigation into the crash, according to a statement from his office.

Al Jazeera’s Tony Cheng, reporting from Bangkok, said the crash unfolded around 3:40pm local time (08:40 GMT), when the bus appeared to get stuck on an intersection with the rail line after the safety barriers descended.

As the freight train rammed into the stationary bus and continued travelling, it dragged several nearby vehicles along with it before the bus burst into flames.

Siripong would not confirm whether the bus had stopped on the railway track or discuss reports that the barriers may not have lowered properly, saying the matter still needs to be investigated.

Firefighters and rescue crews were dispatched to pull people from the wreckage and battle the flames as motorcyclists and passersby attempted to redirect traffic.

The fire has since been brought under control.

[Aljazeera]

Continue Reading

Trending