Atomic Wallet Hackers Move Stolen Funds via OFAC-Sanctioned Exchange Garantex: Elliptic
The attackers are believed to be the infamous North Korean hacker group Lazarus, as per blockchain security firm Elliptic.

The attackers are believed to be the infamous North Korean hacker group Lazarus, as per blockchain security firm Elliptic.
Before moving the stolen funds to Garantex, the hackers used the on-chain trading platform 1inch to exchange the assets for USDT.
The sanctions are part of an international effort to "(block) the expansion of malicious cybercrime services, dangerous drugs and other illicit products".
The sanctions were part of an international effort aimed at “[disrupting the] proliferation of malicious cybercrime services, dangerous drugs and other illegal offerings.”