Bybit’s $1.4B breach.

Silent Push researchers uncovered infrastructure attributed to the Lazarus APT linked to the $1.4B Bybit crypto heist, highlighting the domain bybit-assessment.com registered hours before the attack; the investigation details patterns of test entries, VPN usage, fake job interview scams targeting crypto users, malware deployment tied to North Korean-linked groups (TraderTraitor, Contagious Interview), and impersonation of major crypto platforms such as Coinbase, Binance, and Kraken to lure victims.