Cybersecurity experts at Certik found that the North Korean hacker group Lazarus has moved 400 ETH in the amount of about $ 750,000 to the Tornado Cash cryptocurrency mixer.

The translation of the stolen broadcasts in Tornado Cash suggests that Lazarus hackers use a cryptomixer to launder money and “notice traces” of their illegal activity. This group of hackers is responsible for the large -scale hacking of the BYBIT crypto -tank, with which crypto acts of $ 1.4 billion were stolen, which became one of the most high -profile incidents in the history of cryptocurrencies.

The Lazarus group is also associated with the January hacking of the Phemex crypto -tank for $ 29 million and theft of $ 600 million from the Ronin network in 2022. By data Chainalysis, in 2024, North Korean hackers stole cryptoactives worth about $ 1.3 billion during 47 incidents. This is more than twice the number of thefts of cryptocurrencies committed in 2023.

In addition to the transfer of stolen cryptoactives to mixers, Lazarus also deployed six malicious NPM packets for the penetration of developers, theft of accounting data and the installation of backdors. Malicious software is also aimed at SOLANA and Exodus cryptocurrencies.

Last year, the large Cambodian payment company Huione Pay was suspected of relations with Lazarus hackers. Local media claimed that the company received from them digital assets of $ 150,000.