BitoPro report: The attack was carried out by Lazarus Group, and scripts were implanted through AWS hijacking

This article is machine translated
Show original

On June 19, the Taiwanese crypto trading platform BitoPro released an attack report, which revealed after analyzing the attack method that the incident was carried out by North Korea's Lazarus Group. The hackers used social engineering to inject a Trojan into computers, then hijacked the AWS Session Token to bypass authentication and implant malicious scripts into the hot wallet host.

The Taiwanese crypto trading platform BitoPro was hacked on May 8, with losses of approximately $11.5 million. The stolen funds were subsequently deposited into Tornado Cash or converted to Bit via THORChain and then deposited into Wasabi.

Source
Disclaimer: The content above is only the author's opinion which does not represent any position of Followin, and is not intended as, and shall not be understood or construed as, investment advice from Followin.
Like
Add to Favorites
Comments