Back

Researcher Alleges $44 Million DWF Labs Hack Linked to North Korea’s AppleJeus

Investigators traced a $44 million 2022 cyberattack on DWF Labs to North Korea’s Lazarus Group, using AppleJeus malware for remote wallet access and laundering funds via mixers.

Summary

Investigators report that crypto market maker DWF Labs was targeted in 2022 by North Korea’s Lazarus Group in a $44 million cyberattack. The group allegedly used AppleJeus malware embedded in fake trading software to gain remote wallet access, transferring stolen funds through intermediary wallets and mixers. The incident links to broader Lazarus activities targeting the crypto industry. DWF Labs has not publicly confirmed the breach.

Terms & Concepts
  • AppleJeus: A malware strain linked to North Korea, used to compromise cryptocurrency businesses via disguised trading software.
  • Mixer: A cryptocurrency service that blends transactions to obscure their origin and destination, enhancing privacy or concealing illicit activity.
  • Lazarus Group: A state-sponsored hacking group linked to North Korea, known for global cyberattacks including thefts from financial and crypto institutions.