DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

FinNexus

Date (as written)
2021-05
Year
2021
Country
Virgin Islands, British
Actors (as written)
Bluenoroff
Actor pages
Bluenoroff
Tags (as written)
FinancialGain Cryptocurrency
Dollar figures (as written)
$7,000,000; 7m

Source entries (4)

lazarus.day

FinNexus · 2021-05
FinNexus reported that its ERC-20 contract appeared to have been hacked, while some users alleged the event may have been a rug pull by the project itself. Later on-chain research by ZachXBT included FinNexus among cryptocurrency thefts traced to Lazarus Group, also described as Bluenoroff or APT38, and mapped stolen-fund movement through intermediary wallets, mixers, cross-chain services, exchanges, and OTC facilitators.
https://lazarus.day/incidents/finnexus/

tayvano/lazarus-bluenoroff-research

FinNexus · 2021-05-17
Amt Stolen: $7,000,000
https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/hacks-and-thefts/finnexus.md

UN Panel of Experts S/2024/215

FinNexus · 17 May 2021
Annex 95: Suspected DPRK cyberattacks on cryptocurrency-related companies (2017-2023) investigated by the Panel. Table 2021: Victim: FinNexus; Date: 17 May; Amount (USD equivalent): 7m; Location: British Virgin Islands
https://undocs.org/S/2024/215

Mendeley Data: Collection of DPRK state-sponsored threat actors' activities v2 (Lyu, Sungkyunkwan Univ.)

FinNexus · 2021-05
Reported: 2021-05; Victims: FinNexus; Motivations: FinancialGain; Sectors: Cryptocurrency; Countries: Virgin Islands, British
https://data.mendeley.com/datasets/wwb2rzgfn7/2

Suggest a correction on GitHub