DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

bZx

Date (as written)
2021-11
Year
2021
Country
United States
Actors (as written)
Bluenoroff
Actor pages
Bluenoroff
Tags (as written)
FinancialGain Cryptocurrency
Dollar figures (as written)
$55 million; $55,000,000; 55m

Source entries (6)

lazarus.day

bZx · 2021-11
bZx suffered a phishing-driven compromise after a developer received a malicious Word document, leading to theft of the developer private key and unauthorized ownership changes on affected smart contracts. The attacker used the new contract owner to drain approved tokens from bZx deployments on BSC and Polygon while the Ethereum deployment was reported unaffected, and later blockchain investigations tied the incident into a Lazarus/Bluenoroff-linked cryptocurrency laundering cluster.
https://lazarus.day/incidents/bzx/

CISSM Cyber Events Database (copy exported 21 Apr 2023, via github.com/holisticinfosec/CISSM-EDA)

bZx · 2021-11-05
North Korean threat actor steals $55 million worth of cryptocurrency assets from decentralized finance platform after compromising an employee private key through spear-phishing.
https://therecord.media/hacker-steals-55-million-from-bzx-defi-platform/

tayvano/lazarus-bluenoroff-research

bZx · 2021-11-03
Amt Stolen: $55,000,000
https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/hacks-and-thefts/bzx.md

UN Panel of Experts S/2024/215

bzx · 3 November 2021
Annex 95: Suspected DPRK cyberattacks on cryptocurrency-related companies (2017-2023) investigated by the Panel. Table 2021: Victim: bzx; Date: 3 November; Amount (USD equivalent): 55m; Location: U.S.
https://undocs.org/S/2024/215

Mendeley Data: Collection of DPRK state-sponsored threat actors' activities v2 (Lyu, Sungkyunkwan Univ.)

bZx · 2021-11
Reported: 2021-11; Victims: bZx; Motivations: FinancialGain; Sectors: Cryptocurrency; Countries: United States
https://data.mendeley.com/datasets/wwb2rzgfn7/2

Hackmageddon cyber attacks timelines (Paolo Passeri)

bZx · 05/11/2021
BlueNoroff, a North Korean threat actor steaks an estimated $55 million worth of cryptocurrency assets from bZx, a decentralized finance (DeFi) platform that allows users to borrow, loan, and speculate on cryptocurrency price variations. [Date Occurred: 5/11/2021; Date Discovered: 5/11/2021]
https://www.hackmageddon.com/2021/12/16/1-15-november-2021-cyber-attacks-timeline/
https://therecord.media/hacker-steals-55-million-from-bzx-defi-platform/

Suggest a correction on GitHub