The Lazarus Group, linked to North Korea, transferred 400 ETH ($750,000) to Tornado Cash and laundered $2.91 billion through THORChain within the last five days.
The group infected the NPM ecosystem with harmful packages, including 'BeaverTail', to steal credentials and access crypto wallets.
Lazarus Group, known for crypto breaches, has been involved in various cyber attacks, such as the $1.4 billion Bybit attack in February.
The group has scammed crypto founders with fake Zoom calls, posing as investors and infecting devices with malware to target crypto wallets.