CertiK blog: Lazarus Group's Web3 Rampage
3CX software supply chain attack and JumpCloud data breach (June 2023) · published 2023-09-13
A report by Mandiant unveils a software supply chain attack on 3CX - the developer of a business communication system linking multiple media - likely orchestrated by North Korean hackers. JumpCloud suffered a data breach in June, which impacted numerous Web3 firms. This intrusion has also been traced back to a Lazarus subgroup, named Labyrinth Chollima.