Stand Up for Investors' Right to Know – Say No to Dumping Sell-Offs! [RootData Bounty Campaign]
API Download the RootData App

South Korean authorities suspect that the North Korean hacker group Lazarus is behind the Upbit attack that occurred yesterday

Nov 28, 2025 10:15:56

Share to

According to Yonhap News Agency, South Korean virtual asset exchange Upbit has suffered a hacker attack, resulting in the theft of virtual assets worth 44.5 billion won. Currently, the North Korean reconnaissance agency's hacker organization, Lazarus Group, is highly suspected to be behind this incident.

Local time, Yonhap News Agency learned from the information and communication technology (ICT) industry and relevant South Korean government departments that, given the significant suspicion surrounding the Lazarus Group, authorities are conducting on-site inspections of Upbit. This hacker organization has previously been implicated in the theft of 58 billion won worth of Ethereum from Upbit in 2019. A government official stated, "This attack is unlikely to have targeted the server; it is more likely that the administrator account was compromised, or that the attacker disguised themselves as an administrator to transfer funds." He also mentioned, "Based on the information currently available, it is believed that the hackers used a similar method six years ago, so it is presumed that this attack was executed in the same manner."

Recent Fundraising

More
-- Dec 16
$3M Dec 16
$107M Dec 16

New Tokens

More
Dec 11
Almanak ALMANAK
Dec 11
Dec 11

Latest Updates on 𝕏

More
CZ Followed U
Dec 16
Dec 16