Yapizon

Date (as written): 2017-04
Year: 2017
Country: Korea, Republic of
Actors (as written): Bluenoroff
Actor pages: Bluenoroff
Tags (as written): FinancialGain Cryptocurrency
Dollar figures (as written): $5.3million; US$5 million; 4.8M USD; 4.8m; 3,816 BTC; $5,3 mln; $5,3

Source entries (7)

lazarus.day

Yapizon · 2017-04

Yapizon was listed among South Korean cryptocurrency exchange hacking incidents in reporting on unauthorized withdrawals and unresolved investigations, with authorities emphasizing the difficulty of tracing thefts through decentralized and anonymous blockchain flows. UN Panel reporting separately framed DPRK cyber operations against financial institutions and cryptocurrency exchanges as revenue-generating sanctions evasion activity, but the linked evidence does not provide a technical intrusion chain, malware, infrastructure, or exchange-specific indicators for this case.

https://lazarus.day/incidents/yapizon/

EuRepoC

Yapizon Hack (Lazarus) · 01.04.2017

Lazarus managed to hack into Yapizon, a South Korean cryptocurrency exchange in April 2017 and stole 3,816 Bitcoins valued at $5.3million.

https://www.theregister.co.uk/2017/05/30/nork_spy_agency_lazarus_group_attribution/

https://btcmanager.com/571-million-in-damages-north-korean-hacking-group-lazarus-behind-high-profile-cryptocurrency-hacks/?q=/571-million-in-damages-north-korean-hacking-group-lazarus-behind-high-profile-cryptocurrency-hacks/&

https://www.fireeye.com/blog/threat-research/2017/09/north-korea-interested-in-bitcoin.html

https://www.recordedfuture.com/north-korea-cryptocurrency-campaign/

CISSM Cyber Events Database (copy exported 21 Apr 2023, via github.com/holisticinfosec/CISSM-EDA)

Yapizon · 2017-04-22

Yapizon, a South Korean Bitcoin exchange suffers a massive data breach when hackers steal 3,800 Bitcoin (US$5 million) which is 37% of user funds.

https://www.hackread.com/south-korean-bitcoin-exchange-yapizon-hacked/

UN Panel of Experts S/2019/691

Theft of 4.8M USD in first attack on Youbit (3618 Bitcoin) · 22 April 2017

Annex 21: Suspected DPRK cyber-attacks on financial institutions (including banks and cryptocurrency exchanges) investigated by the Panel. B. Cryptocurrency. Theft of 4.8M USD in first attack on Youbit (3618 Bitcoin)

https://undocs.org/S/2019/691

UN Panel of Experts S/2024/215

Youbit/Yapizon/ Coinbin · 22 April 2017

Annex 95: Suspected DPRK cyberattacks on cryptocurrency-related companies (2017-2023) investigated by the Panel. Table 2017: Victim: Youbit/Yapizon/ Coinbin; Date: 22 April; Amount (USD equivalent): 4.8m; Location: ROK

https://undocs.org/S/2024/215

Mendeley Data: Collection of DPRK state-sponsored threat actors' activities v2 (Lyu, Sungkyunkwan Univ.)

Yapizon · 2017-04

Reported: 2017-04; Victims: Yapizon; Motivations: FinancialGain; Sectors: Cryptocurrency; Countries: Korea, Republic of

https://data.mendeley.com/datasets/wwb2rzgfn7/2

UN Panel of Experts S/2019/171

Yapizon · Apr 2017

Annex 39: Open source report on attacks on Crypto Exchanges, January 2017-September 2018 (image of Group-IB table “Successful attacks on crypto exchanges 2017-2018”, source www.group-ib.com/media/gib-crypto-summary/). Row: Date: Apr 2017; Name of Project: Yapizon; Country: South Korea; Criminal group: Lazarus; Stolen in cryptocurrency: 3,816 BTC; Stolen in USD: $5,3 mln. (Rows in the same table with Criminal group “Unknown” are not taken.)

https://undocs.org/S/2019/171

Suggest a correction on GitHub