North Korean Lazarus Group Shifts Focus to Individual Investors – Coincu

Key Points:

  • Lazarus Group targets individuals, stealing $5.2 million through malware.
  • Security firms advise using hardware wallets for large assets.
  • ETH funds moved through Tornado Cash mixing service.

The North Korean state-sponsored hacker collective, Lazarus Group, has reportedly targeted individual investors, executing an attack on May 24th that resulted in more than $5.2 million in stolen funds from a trader. PANews reports that funds comprised of multiple cryptocurrency types are involved, marking a notable departure for the group, which had previously focused on institutional targets.

This strategic pivot to individual investors has raised alarm among security experts and individual investors alike. Recommendations include employing hardware wallets and enabling two-factor authentication to safeguard against similar attacks. The Lazarus Group’s increased focus on individual accounts suggests a potential shift in larger hacking strategies within the cryptocurrency sector.

Lazarus Group Targets Individuals with $5.2 Million Heist

The Lazarus Group, known for high-profile crypto heists, has reportedly shifted tactics towards individual targets, as seen in the recent attack resulting in the theft of over $5.2 million. The operation involved malware that exploited various wallet types, including exchange wallets and multi-signature wallets.

“Security experts routinely recommend using hardware wallets for significant holdings and enabling two-factor authentication,” emphasized one observer, highlighting the need for vigilance.

Experts have noted that the stolen funds, particularly 1,000 ETH, were laundered through Tornado Cash, a cautionary tale for crypto users on vulnerable points. The incident raises questions about asset security within the current blockchain ecosystem, underscoring the need for increased security measures across the board.

Implications for Regulatory Actions and Security Measures

Did you know? Lazarus Group’s shift to targeting individual traders follows a history of high-profile institutional attacks, such as the $1.5 billion Bybit hack in 2025, reflecting their evolving cyber tactics.

According to CoinMarketCap, Ethereum (ETH) is currently valued at $2,730.51 with a market cap of $329.64 billion. It dominates 9.63% of the market and has a 24-hour trading volume of $26.35 billion, marking an 11.68% change. Since May 29, 2025, ETH’s price has increased by 3.47% in 24 hours and 3.88% over the last seven days, with substantial growth trends over the past 30, 60, and 90 days.

ethereum-daily-chart-342ethereum-daily-chart-342

Ethereum(ETH), daily chart, screenshot on CoinMarketCap at 07:53 UTC on May 29, 2025. Source: CoinMarketCap

Insights from Coincu’s research team suggest that sustained targeting of individual investors may encourage regulatory bodies to introduce new guidelines aimed at increasing personal asset protection. These developments underline a need for enhanced technological solutions and user awareness training within the community.

Source: https://coincu.com/340437-north-korean-lazarus-targets-investors/