The North Korea-linked Lazarus Group continues operating its cybercriminal activities and now uses Zoom calls to steal from crypto executives.
The Lazarus Group sent 400 ETH worth around $759,444 into Tornado Cash mixing service on March 13 per blockchain security data by CertiK. CertiK informs everyone to stay alert as they observe this skilled group’s activities regularly.
The Lazarus Group led many of the biggest cryptocurrency cyberattacks ever executed. The Ronin network suffered a major breach in 2022 that stole $624 million while another attack in February 2023 let Lazarus Group steal $1.4 billion from Bybit exchange.
We have detected deposit of 400 ETH in https://t.co/0lwPdz0OWi on Ethereum from:
0xdB31a812261d599A3fAe74Ac44b1A2d4e5d00901
0xB23D61CeE73b455536EF8F8f8A5BadDf8D5af848.The fund traces to the Lazarus group's activity on the Bitcoin network.
Stay Vigilant! pic.twitter.com/IHwFwt5uQs
— CertiK Alert (@CertiKAlert) March 13, 2025
New Malware Targets Crypto Developers, Stealing Wallet Information
The crypto world keeps watching for the stolen money movement after the Lazarus Group started cleaning the cryptocurrency crime cash more aggressively. Security professionals focus on a new malware attack that has targeted cryptocurrency developers since multiple months.
The attackers use this malware to steal money and steal information from cryptocurrency wallets MetaMask, Exodus, and Atomic by infecting the NPM supply chain. The Lazarus Group now targets crypto company founders in their illegal operations.
The criminal hackers use Zoom meetings as a fake method to acquire digital money and sensitive private information. According to Nick Bax from the Security Alliance a cybersecurity expert the attackers position themselves as legitimate business partners then fakes technical problems during their meeting.
The video shows a bland venture capitalist on screen while requesting the user to click on a fraudulent link sent through a call. The user’s click starts malware installation automatically on their device.
The method described by Bax has led to the theft of tens of millions through numerous groups that copy his approach. The expert says he sees more organized threats of this kind because the group uses advanced technical methods.
Although the hackers’ true identity remains unknown multiple signs indicate that the Lazarus Group performed these attacks. Chainalysis research shows North Korean-linked hacker groups lead the field in crypto theft because of their skilled techniques and unstoppable resourcefulness.
Lazarus Group Behind $1.34 Billion in Crypto Theft in 2024
Groups of digital thieves stole $1.34 billion through 47 separate thefts in 2024 which made up 61% of all global criminal crypto thefts that year. MON Protocol Pixelmon CEO Giulio Xiloyannis explained his own experience when the attack occurred. After getting a risky Zoom link Xiloyannis installed malware onto his system.
He successfully spotted the online scam indicators as he noticed the unscheduled browser-based Zoom meeting followed by the need to enter terminal code. Because he stayed alert the attack failed to harm him. Several more crypto business leaders including Melbin Thomas, David Zhang and Christoph Mussenbrock experienced hackers trying to enter their systems through the Zoom scam.
Another day another North Korean scammer
This time using the same "fake Zoom" scam that's been popular recently
I'll detail what happened to me in this 🧵 pic.twitter.com/X5UZAKJjR0— David Zhang (▲) (@dazhengzhang) March 12, 2025
The Lazarus Group continues its successful cyber operations and shows no plans to stop. Expert analysts predict that North Korean hackers push the limits with advanced crypto heists and scams to fund foreign operations despite international bans.
According to Tom Robinson of Elliptic crypto investigation firm North Korea leads worldwide efforts to launder stolen digital assets. When cryptocurrency players see this level of advanced attacks they must develop strong defenses to shield against theft.
The crypto industry keeps encountering sophisticated cyberattacks by the Lazarus Group who improves their strategies to steal cryptocurrency assets.
