From the shadows of state-sponsored digital warfare, North Korea's Lazarus Group has once again surfaced as the most active advanced persistent threat actor of the past year, linked to at least 31 cyberattacks between October 2024 and September 2025. Their latest suspected operation struck Upbit, South Korea's largest cryptocurrency exchange, draining roughly $30.6 million in Solana assets through methods eerily reminiscent of a 2019 attack on the very same platform. The recurrence speaks to something deeper than opportunism — it reflects a sustained, strategic campaign by a state actor that h
Lokmat Times
· Nov 30, 2025
· security
· 1 min read
High
Sourcing: Characterized
North Korean Lazarus group linked to 31 cyberattacks, suspected in $30.6M Upbit breach
◉
Technology
7783 related articles
Tech Leaders Promise AI Will Cut Work Hours—Their Staff Work 90-Hour W…
BBC News · 100% match
AI models breach sandbox limits in wave of security incidents
BBC News · 99% match
Master AI Chatbots: Five Prompt Techniques for Better Results
The Associated Press · 99% match
AI's circular funding model: innovation engine or systemic risk?
Deutsche Welle · 99% match
Meta AI model hacked another firm during security test, latest in indu…
BBC News · 99% match
Related Coverage
The Guardian · Aug 10
Australia tackles AI governance, gambling reform amid Sydney airport safety concerns
South Australia announces royal commission into AI deployment while federal government commits to gambling legislation a…
Google News · Aug 10 Apple Explores Radical Apple Watch Redesign With Round ScreensApple is exploring significant design changes for future Apple Watch models, including round screens and ceramic cases, …
BBC News · Aug 10 Tech Leaders Promise AI Will Cut Work Hours—Their Staff Work 90-Hour WeeksTech executives claim AI will reduce working hours, but employees at OpenAI, Anthropic, and Meta report working 70-90 ho…
The Star · Aug 10 Apple's Private Relay privacy feature has critical flaw exposing user IP addressesResearchers discovered critical flaws in Apple's WebKit browser engine that leak user IP addresses despite Private Relay…
Bias & Framing
⚖
Article presents factual cybersecurity report with measured language, though relies heavily on attribution claims without emphasizing uncertainty levels or alternative explanations.
Bias Direction
center
Confidence
MED
Authority-based framing: relies on official reports from AhnLab and government sources to establish credibility; presents suspected attribution as established fact through repetition and official backing rather than explicit uncertainty markers.
massive cryptocurrency breach
drained around 45 billion won
heist
sophisticated methods
mounting speculation
North Korean government response or denial
Alternative attribution theories or competing cybersecurity analyses
Lazarus group's own claims or statements
Cryptocurrency industry perspective on security vulnerabilities
Technical experts questioning the attribution certainty
Impact on affected users beyond financial figures
Geopolitical Impact
🌎
North Korean Lazarus group escalates cyber operations with 31 confirmed attacks yearly, targeting South Korean cryptocurrency exchanges and threatening regional financial security.
Escalation Risk
high
Confidence
HIGH
South Korea
North Korea
East Asia
Global cryptocurrency markets
North Korea leverages sophisticated cyber capabilities as asymmetric warfare tool against wealthier South Korea, bypassing conventional military deterrence. Demonstrates DPRK's strategic shift toward financial crime and digital espionage to generate revenue and destabilize regional economic infrastructure. South Korea's vulnerability despite advanced cybersecurity exposes gaps in critical financial sector defenses.
Similar to Cold War-era proxy conflicts, but conducted in cyberspace; parallels Soviet intelligence operations targeting Western financial systems during détente, now executed by non-state actors with state sponsorship.
Economic Lens
📈
North Korean Lazarus group linked to 31 cyberattacks including $30.6M Upbit cryptocurrency breach, raising cybersecurity risks for digital asset exchanges and financial institutions.
Market Signal
bearish
Confidence
HIGH
Cryptocurrency and Digital Assets
Financial Services and Banking
Cybersecurity
Technology Infrastructure
South Korean Financial Markets
Cryptocurrency exchange users face increased security risks and potential asset losses. Consumer confidence in crypto platforms may decline, leading to reduced trading volumes and withdrawal of funds from vulnerable exchanges. Retail investors may shift to more secure platforms or traditional financial instruments.
Governments likely to strengthen cybersecurity regulations for crypto exchanges, mandate higher security standards, increase funding for cybercrime investigation units, and potentially impose stricter capital requirements or insurance mandates for digital asset platforms. International sanctions against North Korea may be reinforced.