threatintel
actor tracker
Lazarus Group
Compromiseseverity: Critical2016-02-04

Bangladesh Bank SWIFT heist

published by BAE Systems Threat Research
Actor
Lazarus GroupKP · DPRKAPT

DPRK state-sponsored umbrella set associated with the Reconnaissance General Bureau. Mixes financially-motivated operations (including major cryptocurrency exchange thefts and SWIFT-network bank intr…

Summary

Attackers issued fraudulent SWIFT messages from Bangladesh Bank's account at the Federal Reserve Bank of New York, attempting transfers of nearly $1B and successfully moving $81M to accounts in the Philippines. Multiple analyses — including the BAE Systems / SWIFT joint report — link the tradecraft and tooling to Lazarus.

Tags

financialswiftbangladesh-bank

Primary source

baesystemsai.blogspot.com

Other Lazarus Group events