Bitcoin Magazine
Bitrefill Discloses Cyberattack, Points to North Korea’s Lazarus Group
Crypto e-commerce platform Bitrefill said it was the target of a cyberattack earlier this month that resulted in stolen funds and limited exposure of customer data, with indicators pointing to the North Korean-linked Lazarus Group as a likely perpetrator.
The breach, which began on March 1, originated from a compromised employee laptop, according to the company’s incident report.
Attackers were able to extract legacy credentials tied to production systems, allowing them to escalate access across Bitrefill’s infrastructure, including segments of its internal database and certain cryptocurrency hot wallets.
Bitrefill said the attackers drained an undisclosed amount of funds from its hot wallets while also exploiting its gift card inventory systems to place suspicious purchases with vendors. The company did not specify the total financial impact but stated it will absorb the loss
We współpracy z: https://bitcoinmagazine.com/news/bitrefill-cyberattack-points-north-korea
