PANews reported on November 28 that, according to Yonhap News Agency, the South Korean virtual asset exchange Upbit suffered a hacker attack yesterday, with virtual assets worth 44.5 billion won stolen ( Upbit disclosed 54 billion won yesterday ). Currently, the Lazarus Group, a hacker group affiliated with the North Korean Reconnaissance General Bureau, is highly suspected of being behind the attack. On November 28, local time, Yonhap News Agency learned from the information and communication technology (ICT) industry and relevant South Korean government departments that, given the high suspicion surrounding the Lazarus Group, a hacker group affiliated with the North Korean Reconnaissance General Bureau, authorities are conducting an on-site investigation of Upbit. This hacker group was previously accused of involvement in the 2019 theft of 58 billion won worth of Ethereum from Upbit. A government official stated, "This attack is unlikely to have targeted the server; it's more probable that the attacker stole the administrator's account or impersonated an administrator to transfer funds." He added, "Based on current information, hackers used the same method to launch attacks six years ago, so we speculate that this is the same modus operandi."PANews reported on November 28 that, according to Yonhap News Agency, the South Korean virtual asset exchange Upbit suffered a hacker attack yesterday, with virtual assets worth 44.5 billion won stolen ( Upbit disclosed 54 billion won yesterday ). Currently, the Lazarus Group, a hacker group affiliated with the North Korean Reconnaissance General Bureau, is highly suspected of being behind the attack. On November 28, local time, Yonhap News Agency learned from the information and communication technology (ICT) industry and relevant South Korean government departments that, given the high suspicion surrounding the Lazarus Group, a hacker group affiliated with the North Korean Reconnaissance General Bureau, authorities are conducting an on-site investigation of Upbit. This hacker group was previously accused of involvement in the 2019 theft of 58 billion won worth of Ethereum from Upbit. A government official stated, "This attack is unlikely to have targeted the server; it's more probable that the attacker stole the administrator's account or impersonated an administrator to transfer funds." He added, "Based on current information, hackers used the same method to launch attacks six years ago, so we speculate that this is the same modus operandi."

South Korean authorities suspect the North Korean hacking group Lazarus was behind yesterday's Upbit attack.

2025/11/28 10:15

PANews reported on November 28 that, according to Yonhap News Agency, the South Korean virtual asset exchange Upbit suffered a hacker attack yesterday, with virtual assets worth 44.5 billion won stolen ( Upbit disclosed 54 billion won yesterday ). Currently, the Lazarus Group, a hacker group affiliated with the North Korean Reconnaissance General Bureau, is highly suspected of being behind the attack. On November 28, local time, Yonhap News Agency learned from the information and communication technology (ICT) industry and relevant South Korean government departments that, given the high suspicion surrounding the Lazarus Group, a hacker group affiliated with the North Korean Reconnaissance General Bureau, authorities are conducting an on-site investigation of Upbit. This hacker group was previously accused of involvement in the 2019 theft of 58 billion won worth of Ethereum from Upbit.

A government official stated, "This attack is unlikely to have targeted the server; it's more probable that the attacker stole the administrator's account or impersonated an administrator to transfer funds." He added, "Based on current information, hackers used the same method to launch attacks six years ago, so we speculate that this is the same modus operandi."

Disclaimer: The articles reposted on this site are sourced from public platforms and are provided for informational purposes only. They do not necessarily reflect the views of MEXC. All rights remain with the original authors. If you believe any content infringes on third-party rights, please contact [email protected] for removal. MEXC makes no guarantees regarding the accuracy, completeness, or timeliness of the content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be considered a recommendation or endorsement by MEXC.