Share this article

North Korea's Lazarus Hackers Blamed in deBridge Finance Cyberattack

Company co-founder Alex Smirnov warns all Web3 teams that the campaign is likely widespread.

(Ilya Pavlov/unsplash)
(Ilya Pavlov/unsplash)

The victim of an email-based cyberattack, cross-chain protocol deBridge Finance says its investigation shows the action likely came from the North Korea-associated Lazarus Group.

The attack took the form of an email address spoofing that of deBridge co-founder Alex Smirnov. Though most employees reported the suspicious email, one downloaded and opened the associated file.

STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters

The company's probe of the hack shows a similar attack vector to those noticed in other cyberattacks by North Korea's Lazarus Group, said Smirnov in a lengthy Twitter thread.

"PSA for all teams in Web3," wrote Smirnov, "this campaign is likely widespread."

Read more: US Officials Tie North Korea’s ‘Lazarus’ Hackers to $625M Crypto Theft


Stephen Alpher

Stephen is CoinDesk's managing editor for Markets. He previously served as managing editor at Seeking Alpha. A native of suburban Washington, D.C., Stephen went to the University of Pennsylvania's Wharton School, majoring in finance. He holds BTC above CoinDesk’s disclosure threshold of $1,000.

Stephen Alpher