DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Previously unreported domain associated with TraderTraitor Bybit activity (in "Substantial Upgrades to Crawling History")

Date (as written)
2025-07-22T00:00:00Z
Year
2025
Actors (as written)
Lazarus Group (TraderTraitor)
Actor pages
Lazarus Group

Source entries (1)

Validin blog

Previously unreported domain associated with TraderTraitor Bybit activity (in "Substantial Upgrades to Crawling History") · 2025-07-22T00:00:00Z
On March 11, 2025, we used host response history in Validin to investigate the Bybit heist, attributed by the FBI to North Korea’s Lazarus Group as “ TraderTraitor .” ... we’re able to identify an additional, previously unreported domain name and IP address that was likely associated with the TraderTraitor activity:
https://www.validin.com/blog/crawl_history_artifact_upgrade/

Suggest a correction on GitHub