Bitrefill Claims Lazarus Group Hacked Them, Stealing Funds

Crypto e-commerce retailer Bitrefill has revealed it was the sufferer of a cybersecurity assault on March 1, with the strategies used intently resembling these of Lazarus Group, North Korea’s infamous hacking group.

In a submit to X on Tuesday, Bitrefill stated the hackers used malware, on-chain tracing, and reused IP and e-mail infrastructure to compromise an worker’s laptop computer, enabling them to empty funds from the corporate’s scorching wallets whereas additionally accessing 18,500 buy information, probably revealing “restricted buyer info.”

Bitrefill stated BlueNoroff Group, one other North Korean hacking group with shut ties to the Lazarus Group, might have additionally been concerned or been the only real attacker.

Bitrefill, which allows clients to spend crypto on real-world merchandise and reward playing cards, stated there was no proof that the hackers extracted its database, suggesting the motive was monetary.

“There isn’t any proof that they extracted our whole database, solely that the attackers ran a restricted variety of queries according to probing to know what there was to steal, together with cryptocurrency and Bitrefill reward card stock.”

Whereas Bitrefill didn’t disclose how a lot funds had been stolen, the corporate stated it “will take up” these losses from its operational capital.

“Nearly every thing is again to regular: funds, inventory, accounts,” Bitrefill stated, including: “Gross sales volumes are additionally again to regular, and we’re eternally grateful to our clients in your continued confidence in us.”