South Korea investigates suspected North Korean role in 44.5 billion won Upbit crypto hack

Authorities in South Korea are actively probing a significant breach at the cryptocurrency exchange Upbit. This investigation is fueled by suspicions of involvement from a North Korean hacking group in the unauthorized withdrawal of digital assets valued at approximately 44.5 billion won. According to reports from Yonhap News Agency, investigators are focusing on evidence that suggests the notorious Lazarus Group may be behind this incident. This group, which has ties to North Korea's intelligence agency, has been implicated in multiple high-profile cryptocurrency thefts over the years and is regarded as one of the most advanced cyber threats worldwide. The U.S. Federal Bureau of Investigation has previously characterized North Korea's cyber activities as “one of the most advanced persistent threats” in the realm of cybersecurity. The recent attack on Upbit, described as “an abnormal withdrawal,” shares striking similarities with a previous heist in 2019, which saw 58 billion won stolen and was also attributed to the Lazarus Group, as noted by an unnamed government official. An official from the National Police Agency’s cyber crime division has confirmed that an investigation is currently in progress but has not disclosed additional details. Meanwhile, the National Intelligence Service was not available for comment on the matter. Dunamu, the company behind Upbit, has stated that they are working diligently to assess the cause and extent of the asset outflow. Notably, this incident occurred just hours before South Korean internet giant Naver announced its plans to acquire Dunamu. Upbit continues to hold its position as the largest cryptocurrency exchange in South Korea.