The United States' Federal Bureau of Investigation (FBI) has warned cryptocurrency companies that they have identified blockchain activity related to millions of dollars in stolen cryptocurrency.
TraderTraitor is a North Korean State-Sponsored organization that has targeted leading cryptocurrency firms and activities which includes DeFi, play-to-earn games, trading companies, venture capital funds and individual holders of cryptocurrency and NFTs. TraderTraitor has been associated with notorious hacking groups Lazarus Group, APT38, BlueNoroff and Stardust Chollima.
Approximately 1,580 Bitcoins from various heists are currently being held in the following Bitcoin addresses:
- 3LU8wRu4ZnXP4UM8Yo6kkTiGHM9BubgyiG
- 39idqitN9tYNmq3wYanwg3MitFB5TZCjWu
- 3AAUBbKJorvNhEUFhKnep9YTwmZECxE4Nk
- 3PjNaSeP8GzLjGeu51JR19Q2Lu8W2Te9oc
- 3NbdrezMzAVVfXv5MTQJn4hWqKhYCTCJoB
- 34VXKa5upLWVYMXmgid6bFM4BaQXHxSUoL
TraderTraitor affiliated groups have been involved in many recent international heists.
June 2nd 2023 - $100,000,000 stolen from Atomic Wallet
June 22nd 2023 - $37,000,000 stolen from CoinsPaid
June 22nd 2023 - $60,000,000 stolen from Alphapo
In April of 2022 the FBI issued a report regarding TraderTraitor activities which details the methods and means that this North Korean government group has used to extract millions from individuals and companies in the previous years. To combat this, they recommend that institutions and individuals take the following actions:
1. Patch all systems.
2. Train users to recognize and report phishing attempts.
3. Use multifactor authentication.
