與北韓有關的駭客將和諧網路戰利品轉移到多個平台

北韓駭客組織 Lazarus Group 涉嫌發動價值 1 億美元的 Harmony 網路攻擊，該組織透過連接比特幣、Avalanche、Tron 和以太坊區塊鏈的橋樑洗錢被盜資金。駭客利用專注於隱私的加密錢包 Railgun，將橋接比特幣轉換為穩定幣 USDT 和 USDD，以掩蓋痕跡。這種洗錢活動是在對混幣服務進行更嚴格的審查和製裁之後進行的，突顯了網路犯罪分子將非法加密貨幣轉換為法定貨幣所採用的不斷變化的策略。

North Korean-Linked Hackers Bridge Stolen Harmony Network Funds to Multiple Platforms

與北韓有關的駭客將被盜的 Harmony 網路資金轉移到多個平台

Blockchain forensic investigators from MistTrack have uncovered the movement of stolen funds from the $100 million Harmony network attack to the Avalanche, Tron, and Ethereum platforms. Suspicion has fallen upon the Lazarus Group, a North Korean state-sponsored hacking collective responsible for the infamous $635 million Ronin Bridge breach.

MistTrack 的區塊鏈取證調查人員發現，價值 1 億美元的 Harmony 網路攻擊中被盜資金流向 Avalanche、Tron 和以太坊平台。拉扎勒斯集團 (Lazarus Group) 受到懷疑，這是一個由北韓國家資助的駭客組織，對價值 6.35 億美元的浪人橋 (Ronin Bridge) 漏洞負責。

Following the initial attack, the hackers sent $63.5 million in Ethereum (ETH) to Railgun, a privacy-enhancing crypto wallet, on May 20th, 2023. This transaction was followed by further transfers to various exchanges. Subsequently, Bitcoin (BTC) was withdrawn from these exchanges, with a portion being transferred to the Avalanche network through a bridging service.

在最初的攻擊之後，駭客於 2023 年 5 月 20 日向隱私增強型加密錢包 Railgun 發送了 6,350 萬美元的以太坊 (ETH)。隨後，比特幣（BTC）從這些交易所撤出，其中一部分透過橋接服務轉移到 Avalanche 網路。

In a bid to further conceal the stolen assets, the hackers converted the bridged Bitcoin to stablecoins Tether (USDT) and USD Coin (USDD), which were then transferred to multi-chain USDT addresses on both the Ethereum and Tron networks.

為了進一步隱藏被盜資產，駭客將橋接的比特幣轉換為穩定幣 Tether (USDT) 和 USD Coin (USDD)，然後轉移到以太坊和 Tron 網路上的多鏈 USDT 位址。

This complex laundering scheme highlights the lengths to which hackers are going to evade detection and convert stolen cryptocurrencies into fiat currencies. The United States' recent sanctions against Tornado Cash, a prominent crypto mixing service, has intensified the pressure on criminals to find alternative methods to launder their ill-gotten gains.

這種複雜的洗錢計畫凸顯了駭客逃避偵測並將被盜加密貨幣轉換為法定貨幣的程度。美國最近對著名的加密貨幣混合服務公司 Tornado Cash 實施制裁，增加了犯罪分子尋找替代方法來清洗其非法所得的壓力。

The incident amplifies the ongoing challenges faced by blockchain platforms in safeguarding against malicious activities. According to blockchain security firm Chainalysis, crypto-related hacks resulted in the loss of over $3 billion in 2022.

此事件加劇了區塊鏈平台在防範惡意活動方面所面臨的持續挑戰。據區塊鏈安全公司 Chainaanalysis 稱，2022 年與加密貨幣相關的駭客攻擊造成了超過 30 億美元的損失。

The investigation into the Harmony network hack is ongoing, with law enforcement authorities collaborating with blockchain sleuths to track the movement of stolen funds and identify the perpetrators. The incident serves as a reminder of the persistent threat posed by sophisticated cybercriminals and the need for vigilance in the rapidly evolving digital asset landscape.

對 Harmony 網路駭客攻擊的調查正在進行中，執法機構與區塊鏈偵探合作，追蹤被盜資金的動向並識別肇事者。該事件提醒人們，老練的網路犯罪分子所構成的持續威脅以及在快速發展的數位資產環境中保持警惕的必要性。