Bitrefill Reports Cyberattack Linked to North Korea’s Lazarus Group
- On March 1, a cyberattack compromised Bitcoin wallets and infrastructure at Bitrefill.
- The breach exposed approximately 18,500 purchase records, including emails and payment addresses.
- Attackers accessed production keys and drained funds from hot wallets before the system was taken offline.
- Bitrefill has since resumed operations and is covering losses from operational capital.
- The company is collaborating with law enforcement and security teams to investigate the incident.
The attack highlights vulnerabilities in cryptocurrency security, particularly as it involved malware and reused credentials linked to the Lazarus Group, known for targeting crypto projects like Ronin Network and Atomic Wallet.
Despite the breach affecting customer data, Bitrefill believes no primary targets were compromised, as evidenced by the limited queries made by attackers regarding cryptocurrency holdings.(Source)
