Japanese police say a group of North Korean hackers likely used a job offer message to steal assets from cryptocurrency exchange DMM Bitcoin in May.
The theft cost the company bitcoin valued at about 308 million US dollars at the time of the attack.
The firm earlier said it is closing its business after handing over the accounts and assets of its customers to another exchange.
Japan's National Police Agency and Tokyo Metropolitan Police Department announced on Tuesday that TraderTraitor was affiliated with the theft.
TraderTraitor is an arm of the Lazarus hacking group, which is believed to be a subordinate organization of North Korean authorities.
The police said an employee of a company that manages cryptocurrency for DMM Bitcoin received a message on social media in March from an individual claiming to be an employment recruiter at another firm.
The message is believed to have planted a computer virus when it was clicked on, allowing the group to steal information about access authority, and to rewrite amounts of transactions and beneficiaries.
The police say the social media account that sent the message and the server it was connected with were related to North Korea.
The Japanese government and the US Federal Bureau of Investigation have issued a joint statement, condemning the hackers and North Korea. They urge people to beware of suspicious messages.
The theft cost the company bitcoin valued at about 308 million US dollars at the time of the attack.
The firm earlier said it is closing its business after handing over the accounts and assets of its customers to another exchange.
Japan's National Police Agency and Tokyo Metropolitan Police Department announced on Tuesday that TraderTraitor was affiliated with the theft.
TraderTraitor is an arm of the Lazarus hacking group, which is believed to be a subordinate organization of North Korean authorities.
The police said an employee of a company that manages cryptocurrency for DMM Bitcoin received a message on social media in March from an individual claiming to be an employment recruiter at another firm.
The message is believed to have planted a computer virus when it was clicked on, allowing the group to steal information about access authority, and to rewrite amounts of transactions and beneficiaries.
The police say the social media account that sent the message and the server it was connected with were related to North Korea.
The Japanese government and the US Federal Bureau of Investigation have issued a joint statement, condemning the hackers and North Korea. They urge people to beware of suspicious messages.
Similar Readings (5 items)
Analysis: North Korea-affiliated hackers stole assets from DMM Bitcoin
Cryptocurrency stolen by N.Korean hackers seized in Norway
Japanese authorities warn of N.Korean hacker attacks on cryptoassets
FBI: North Koreans behind theft of $1.5 bil. in virtual assets
Summary: North Korea stole $2.8 billion in cryptocurrency in 2024 and 2025, report says
Summary
Japanese authorities identify a North Korean hacking group, TraderTraitor (affiliated with Lazarus), as the culprit behind a $308 million cryptocurrency theft from DMM Bitcoin in May. The stolen bitcoin were from the exchange's assets. An employee of a related company received a job offer message
Statistics
224
Words1
Read CountDetails
ID: 3729183b-0c00-4ea7-b159-7b95c8d92680
Category ID: nhk
URL: https://www3.nhk.or.jp/nhkworld/en/news/20241224_04/
Date: Dec. 24, 2024
Created: 2024/12/24 19:00
Updated: 2025/12/08 07:38
Last Read: 2024/12/24 21:42