logo

TraderTraitor: The Kings of the Crypto Heist

ID: 51bfa9d7-648e-57e4-9b96-8286449ec585

STIX ID: report--51bfa9d7-648e-57e4-9b96-8286449ec585

Feed Name: WIRED Security

Threat Score
90/100

Date Published: 2025-04-14

Date Updated: 2026-04-26

Author: Matt Burgess

...
...

On February 21 a large-scale cryptocurrency theft unfolded when attackers seized a Bybit wallet and moved almost $1.5 billion in tokens; law enforcement attributed the operation to North Korea’s TraderTraitor (a Lazarus-linked APT subgroup) which has a documented history of targeting exchanges, DeFi platforms, and supply-chain infrastructure to fund state programs.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.