UN Panel of Experts S/2024/215
“Analysis of North Korean Hackers’ Targeted Phishing Scams on Telegram,” SlowMist · 6 December 2023
Annex 99 (Select reports of DPRK cyber actors targeting the cryptocurrency industry), report 12: “Analysis of North Korean Hackers’ Targeted Phishing Scams on Telegram,” SlowMist, 6 December 2023. Summary: The Lazarus Group has conducted a widespread phishing operation on Telegram since 2022, specifically targeting the cryptocurrency industry. The DPRK cyber actors impersonate reputable investment institutions, establishing fake Telegram accounts in these entities’ names, to execute phishing scams against various cryptocurrency and decentralized finance project teams ...