A fake job offer containing spyware caused a $620 million crypto hack
A North Korean Lazarus hacking group is allegedly blamed by the US Treasury authority, for hacking $620 million in Cryptocurrency from Axie Infinity.
The Lazarus group is a North Korean hacking group which was developed in 2009, which is runned by numerous individuals from North Korea State.
Initially, the hackers appeared as the job recruiters of some company and offered jobs on LinkedIn. Amid which, the senior engineer from Axie Infinity applied for that very job and later, the engineer got an offer letter which had Spyware.
Henceforth, when the letter was downloaded in the device, the notorious group got all the access to the Axie Infinity’s blockchain ‘Ronin.’ Ronin contains all the data of the users who exchange Ethereum based digital coins.
Hence, after the incident, the Ronin network explained to the US Department of Treasury and FBI that, ‘We expect to deliver a full post mortem that will detail security measures put in place and next steps by the end of the month.’
Moreover, ‘We are still in the process of adding additional security measures before redeploying the Ronin Bridge to mitigate future risk’.
Later, the experts revealed that the cyberattack mainly happened due to human error and a lack of Cybersecurity, according to Insider.
Moreover, Axie Infinity is a token based online – video game which was developed by Sky Mavis in a Vietnamese studio. The users can compete with each other and can use Ethereum based Cryptocurrencies.