North Korean crypto hacking operations

Key Points:* Lazarus Group uses U.S.-registered companies for cyber attacks on crypto developers.

• FBI seizes Blocknovas domain used by hackers.
• Operations violate U.S. and U.N. sanctions. North Korean hacker group Lazarus Group has been implicated in cyber attacks targeting cryptocurrency developers through newly registered U.S. shell companies like Blocknovas LLC and Softglide LLC.

The operation by Lazarus Group underscores an ongoing threat to the cryptocurrency sector, violating U.S. and U.N. sanctions and prompting FBI action.

Lazarus Group’s U.S. Shell Companies and FBI Intervention

The Lazarus Group has reportedly registered shell companies in New Mexico and New York to distribute malware. The FBI’s seizure of these domains highlights U.S. governmental action against the threat, aimed at deterring malicious cyber activities linked to North Korean sanctions violations.

The campaign challenges the cryptocurrency community by potentially compromising assets under development. The FBI’s actions demonstrate a clear response to protect the cryptocurrency industry from such threats, emphasizing national security concerns.

The community has shown limited response, with few cryptocurrency leaders publicly addressing this incident. The absence of specific financial losses or affected tokens makes the situation complex and relatively under-discussed among industry figures.

Historical Attacks and Cryptocurrency Market Implications

Did you know? Lazarus Group’s tactics continue their historical trend of targeting cryptocurrency entities, mirroring a similar approach seen in the infamous 2022 Ronin Bridge exploit.

According to CoinMarketCap, Ethereum (ETH) is priced at $1,751.01, with a market cap of $211.38 billion, accounting for 7.25% market dominance. Trading volume has decreased by 27.23% in 24 hours. The data shows a 10.63% increase over seven days despite longer-term declines.

Ethereum(ETH), daily chart, screenshot on CoinMarketCap at 03:18 UTC on April 25, 2025. Source: CoinMarketCap The Coincu research team indicates that these cybersecurity incidents could prompt heightened regulatory scrutiny within the cryptocurrency space, potentially leading to increased industry-wide security measures. Such developments may influence confidence and investment in new projects.