Skip to content
NewA calmer, faster ZeroHour
Data breachcriticalExploited in the wild

FBI links North Korea's TraderTraitor to $6.43 billion Binance crypto heist

Original title: FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist

The Hacker News ()3 min read1
Part of a story covered by 19 sourcesFBI attributes Binance’s $6.3 billion crypto theft to North KoreaMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

The FBI attributed a $6.43 billion cryptocurrency theft to North Korean group TraderTraitor, which used trojanized Terraform and malware like FLATROOF.

The FBI, US Secret Service, and IRS-CI linked TraderTraitor to stealing over $6.43 billion across 11 blockchains, primarily Ethereum and Bitcoin. The group used job-themed social engineering and trojanized Terraform providers to deploy FLATROOF backdoors and information stealers. Binance resumed withdrawals after security checks, with $2.85 billion frozen by exchanges.

Unconfirmed: Exact attribution to specific North Korean group

Key facts
  • $6.43 billion stolen
  • Largest crypto theft on record
  • Trojanized Terraform providers used
  • FLATROOF backdoor deployed
  • $2.85 billion frozen on-chain
Security assessment · AI, from the articleExploited in the wild

Impact: theft of cryptocurrency assets

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

3 min read at thehackernews.com

The U. S. Federal Bureau of Investigation (FBI) has officially attributed the theft of more than $6 billion in virtual assets to TraderTraitor, a North Korea-aligned elite hacking group also tracked as Jade Sleet, Pressure Chollima, PUKCHONG, Slow Pisces, and UNC4899.

The Hacker News

thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.