South Korean authorities suspect the North Korean hacking group Lazarus was behind yesterday's Upbit attack.

PANews reported on November 28 that, according to Yonhap News Agency, the South Korean virtual asset exchange Upbit suffered a hacker attack yesterday, with virtual assets worth 44.5 billion won stolen ( Upbit disclosed 54 billion won yesterday ). Currently, the Lazarus Group, a hacker group affiliated with the North Korean Reconnaissance General Bureau, is highly suspected of being behind the attack. On November 28, local time, Yonhap News Agency learned from the information and communication technology (ICT) industry and relevant South Korean government departments that, given the high suspicion surrounding the Lazarus Group, a hacker group affiliated with the North Korean Reconnaissance General Bureau, authorities are conducting an on-site investigation of Upbit. This hacker group was previously accused of involvement in the 2019 theft of 58 billion won worth of Ethereum from Upbit.

A government official stated, "This attack is unlikely to have targeted the server; it's more probable that the attacker stole the administrator's account or impersonated an administrator to transfer funds." He added, "Based on current information, hackers used the same method to launch attacks six years ago, so we speculate that this is the same modus operandi."