Cosine: Share the results of the investigation into the crypto attacker Lazarus Group, but do not disclose the names of the attacked platforms

Odaily Planet Daily News SlowMist Yuxian posted on the X platform: "After 30 days of in-depth analysis and investigation, through forensic analysis and correlation tracking, we confirmed that the attacker was the North Korean Lazarus Group. This was a national APT attack against cryptocurrency exchanges. We decided to share the relevant IOCs (Indicators of Compromise), including some cloud service providers, agents and other IPs that were exploited, for emergency investigation by various exchanges and related platforms. It should be noted that this disclosure did not mention which platform or platforms it was, nor did it say Bybit. If there is any similarity, it is really not impossible."