North Korean Hackers Steal $1.5B in Cryptocurrency
ID: 42a2906b-3366-5080-8cbd-9e08f253b1f6
STIX ID: report--42a2906b-3366-5080-8cbd-9e08f253b1f6
Feed Name: Schneier on Security
Threat Score
In February 2025, attackers attributed to North Korea executed a highly sophisticated theft against Bybit by masking a malicious transaction in a benign-looking multisig signing request, manipulating the signing interface and smart-contract logic to gain control of an ETH cold wallet and exfiltrate approximately $1.4–1.5 billion in cryptocurrency; the incident demonstrates that UI manipulation and social engineering can defeat multisig and cold-wallet protections.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.