Lazarus Group, a North Korean hacking group, deposited 400 ETH (approximately $750,000) to Tornado Cash mixing service on March 13, 2025.
The group has been linked to previous cryptocurrency hacks, including the $1.4 billion Bybit exchange hack in February 2025 and the $29 million Phemex exchange hack in January.
Lazarus Group deployed six new malicious packages, including a package called 'BeaverTail,' on the Node Package Manager (NPM) platform to steal credentials and crypto wallet data.
The group's malware targets Chrome, Brave, and Firefox browsers, as well as Solana and Exodus cryptocurrency wallets.