Cryptocurrency payments platform CoinsPaid has pointed the finger at North Korean state-backed Lazarus Group as being behind the hacking of its internal systems, which allowed them to steal $37.3 million on July 22.
“We suspect Lazarus Group, one of the most powerful hacker organisations, is responsible,” CoinsPaid explained in a July 26 post.
While CoinsPaid didn’t explain how the money was stolen exactly, the incident forced the firm to halt operations for four days.
CoinsPaid is back to processing after being hit by a hacker attack. Сlient’s funds were not affected and are fully available.
“We believe Lazarus expected the attack on CoinsPaid to be much more successful. In response to the attack, the company’s dedicated team of experts has worked tirelessly to fortify our systems and minimize the impact, leaving Lazarus with a record-low reward.”
CoinsPaid filed a report with Estonian law enforcement three days after the hack to further investigate the exploit. In addition, several blockchain security firms such as Chainalysis, Match Systems and Crystal assisted in CoinsPaid’s preliminary investigation over the first few days.
The firm’s CEO, Max Krupyshev is confident that the Lazarus Group will be held accountable for their actions.
“We have no doubt the hackers won’t escape justice.”
Blockchain security firm SlowMist believes the CoinsPaid hack may be linked to two recent hacks in Atomic Wallet and Alphapo, which were exploited to the tune of $100 million and $60 million respectively.
MistTrack Update
Recently, the crypto community has been stirred by a sequence of incidents involving @coinspaid, @AtomicWallet, and Alphapo.
A veneer of mystery shrouds these incidents, yet there’s a possibility that Lazarus might be behind them all! pic.twitter.com/ppxRk3xtUh
Online coding platform GitHub believes — with “high confidence” — that Lazarus Group is conducting a social engineering scheme targeted at workers in the cryptocurrency and cybersecurity sectors.
According to a July 26 post by cybersecurity platform Socket.Dev, Lazarus Group’s objective is to lure in these professionals and compromise their GitHub accounts with malware-infected NPM packages to infiltrate their computers.
The cybersecurity platform said the first point of contact is often on a social media platform like WhatsApp, where the rapport is built before the victims are led to clone malware-laden GitHub repositories.
Socket.Dev urged software developers to review repository invitations closely before collaborating and to be cautious when abruptly approached on social media to install npm packages.
The chief rabbi has described the BBC’s response to anti-IDF chanting at Glastonbury as “belated and mishandled” – as the punk-rap duo involved, Bob Vylan, said the UK government needed to talk about its “criminal inaction”.
Sir Ephraim Mirvis said “vile Jew-hatred” had been aired at the Somerset music festival and it was a “time of national shame”.
Confidence in the BBC’s “ability to treat antisemitism seriously” has been brought to a “new low”, he said in a post on X, adding that “outright incitement to violence and hatred” appeared to be acceptable if it was couched as “edgy political commentary”.
Ordinary people had not only failed to see incitement “for what it is” but had cheered it, chanted it, and celebrated it, he said. “Toxic Jew-hatred is a threat to our entire society,” he added.
Bob Vylan, posting a new statement on Instagram on Tuesday, said they were “not for the death of Jews, Arabs or any other race or group of people”.
Rather, they were for the “dismantling of a violent military machine” – the Israel Defence Forces.
Bob Vylan chanted “death to the IDF” at Glastonbury. As many as 95% of the IDF are thought to be Jewish.
In their statement, the group said they were a “distraction from the story” and that whatever “sanctions” they received would also be a distraction.
Their US visas have been revoked and United Talent Agency, their US representatives, have dropped them.
Image: Bob Vylan with their MOBO award in London in November 2022. Pic: Reuters
Referring to the war in Gaza, they claimed the UK government does not want them to ask “why they remain silent in the face of this atrocity”, “why they aren’t doing more to stop the killing” and “feed the starving”.
They added: “The more time they talk about Bob Vylan, the less time they spend answering for their criminal inaction.
“We are being targeted for speaking up. We are not the first, we will not be the last, and if you care for the sanctity of human life and freedom of speech, we urge you to speak up, too.”
It has emerged that Tim Davie, the BBC’s director-general, was at Glastonbury when the duo led chants of “Death to the IDF” which were broadcast live.
The prime minister’s spokesman, asked if the PM had confidence in Mr Davie, said Sir Keir Starmer had “confidence in the BBC”, adding: “The position of the director-general is a matter for the BBC’s board.”
Speaking in the Commons, Culture Secretary Lisa Nandy said “accountability” was important and it was something she had “impressed upon the BBC leadership”.
She added: “When you have one editorial failure, it’s something that must be gripped. When you have several, it becomes a problem of leadership.”
The cabinet minister said she’d called Mr Davie after Bob Vylan’s set had been broadcast to find out why it had aired, and why the feed had not been cut.
“I expect answers to these questions without delay,” she said.
Meanwhile Dame Caroline Dinenage, chair of the culture, media and sport committee, has written to Mr Davie in relation to the corporation’s Glastonbury coverage.
The committee has said the letter asks about editorial and decision-making processes and whether consideration was given to broadcasting with a delay. It also asks about staffing levels at the festival and contingency planning.
Image: Lisa Nandy, the culture secretary, has claimed there is a ‘problem of leadership’ at the BBC. File pic: PA
Avon and Somerset Police has begun a criminal investigation and is reviewing footage of both Bob Vylan and Kneecap’s performances at Glastonbury.
The force said a senior detective had been appointed – and it had been contacted by people from around the world.
“We… recognise the strength of public feeling,” it said.
During Kneecap’s set, one member suggested starting a “riot” outside his bandmate’s forthcoming court appearance, before clarifying that he meant “support”. Liam Og O hAnnaidh, also known as Mo Chara, is charged with a terror offence.
Image: Moglai Bap and Mo Chara of Kneecap performing at Glastonbury. Pic: Reuters
Bob Vylan had been due to tour the US before their visas were revoked.
US deputy secretary of state Christopher Landau said action had been taken “in light of their hateful tirade at Glastonbury, including leading the crowd in death chants”.
“Foreigners who glorify violence and hatred are not welcome visitors to our country,” he added.
Spotify
This content is provided by Spotify, which may be using cookies and other technologies.
To show you this content, we need your permission to use cookies.
You can use the buttons below to amend your preferences to enable Spotify cookies or to allow those cookies just once.
You can change your settings at any time via the Privacy Options.
Unfortunately we have been unable to verify if you have consented to Spotify cookies.
To view this content you can use the button below to allow Spotify cookies for this session only.
During Bob Vylan’s set, the duo performed in front of a screen that showed several messages, including one that claimed Israel’s actions in Gaza amounted to “genocide”.
The war in Gaza began after Hamas militants attacked Israel on 7 October 2023 and killed 1,200 people and took about 250 hostage.
Israel’s offensive in Gaza has led to the deaths of more than 56,500 people, according to the Hamas-run health ministry, which does not differentiate between civilians and combatants.
Media watchdog Ofcom has said the BBC “clearly has questions to answer” over the live stream from Glastonbury.
A BBC spokesperson said: “The director-general was informed of the incident after the performance and at that point he was clear it should not feature in any other Glastonbury coverage.”
The broadcaster respects freedom of expression but “stands firmly against incitement to violence”, they said.
They added: “The antisemitic sentiments expressed by Bob Vylan were utterly unacceptable and have no place on our airwaves…
“The team were dealing with a live situation, but with hindsight we should have pulled the stream during the performance. We regret this did not happen.”