The truth about the theft of Japan's DMM Bitcoin: North Korean hackers used social engineering to steal 4502 BTC, revealing the modus operandi

Japan's licensed Cryptocurrencyexchange DMM Bitcoin was hacked in May this year, resulting in the theft of 4,502.9 BTC, the Japanese National Police Agency said on the 24th that after a joint investigation with the FBI and the US Department of Defense Cybercrime Center (DC3), it was confirmed that the theft was carried out by the Trader Traitor, a subsidiary of the North Korean hacking group Lazarus Group. (Synopsis: After 4500 BTC was stolen, Japanese exchangeDMM Bitcoin terminated operations, and assets will be transferred to SBI Group) (Background supplement: 4502 BTC stolen is not afraid" DMM intends to increase capital / borrow 55 billion yen compensation, who is the mysterious AV godfather behind it? Japan's licensed Cryptocurrencyexchange DMM Bitcoin was hacked in May this year, resulting in the theft of 4,502.9 BTC, worth $320 million at the time, hit hard by the hack, DMM Bitcoin subsequently raised 55 billion yen to compensate customers, but decided to abandon the restructuring plan because it could not continue to provide enough services to customers. DMM Bitcoin announced at the beginning of the month that it would cease operations and expects to transfer client accounts and custody assets to SBI VC Trade, a subsidiary of SBI Group, in March next year, and SBI VC Trade will take over DMM Bitcoin's existing 14 CryptocurrencySpot trading services. According to CoinDesk, the Japanese National Police Agency said on the 24th that after a joint investigation with the Federal Bureau of Investigation (FBI) and the U.S. Department of Defense Cybercrime Center (DC3), it was determined that the perpetrator of the theft was committed by the Trader Traitor, a hacking group owned by the North Korean hacker group Lazarus Group. According to the Japanese National Police Agency, the hack was carried out in multiple stages, and at the end of March 2024, the criminal group first impersonated the head of corporate recruitment on LinkedIn and contacted employees of Ginco, a software development company commissioned by DMM Bitcoin to manage encryption's asset transactions. Pretending to conduct a recruitment quiz, the criminal group sent a link to a website with a malicious program, and when an employee clicked on the link, the account was taken over by hackers, using the hacked account to hack into Ginco's internal systems, and then improperly manipulated DMM Bitcoin's trading program to transfer customer assets to another address managed by the group. Japan's National Police Agency said it will continue to work with the FBI, other U.S. government agencies and international partners to investigate the illegal activities of North Korean hackers, including cybercrime and encryption asset theft, while the National Police Agency, the Cabinet Cyber Security Center, and the Financial Services Agency have documents on methods and countermeasures to attack hacker groups, calling on companies related to encryption's assets to be cautious. North Korean hackers accounted for more than 60% of the total theft of encryption assets this year It is worth noting that in recent years, cryptocurrency theft accidents have been frequent, North Korean hacking organizations have become the largest crime, Chainalysis released a report on the 19th, pointing out that this year global hackers stole a total of $2.2 billion worth of encryption assets, of which North Korean hackers stole $1.34 billion, accounting for 61% of the total theft of encryption assets this year. Related stories The seventh largest in history! DMM Bitcoin was stolen by hackers 4502 BTC, Japan's Financial Services Agency demanded a thorough investigation, compensation plan The nightmare repeats! Japan's DMM Bitcoinexchange was hacked by 4,503 BTC, losing more than 48 billion yen Japanese e-commerce giant DMM built its first chain game in Oasys, "Enterprise ☆ Girl" was reborn in Web3 in Q2 next year "The truth about the theft of Japanese DMM Bitcoin: North Korean hackers steal 4502 BTC methods revealed in social attacks" This article was first published in BlockTempo "Dynamic Trend - The Most Influential Block Chain News Media".