Crypto analysts stunned by Lazarus Group\u2019s capabilities in $1.46B Bybit theft | CyberScoop<\/title> <meta name=\"description\" content=\"The amount stolen last week surpasses what the group was able to steal in all of 2024.\"> <link rel=\"canonical\" href=\"https:\/\/cyberscoop.com\/bybit-lazarus-group-north-korea-ethereum\/\"> <meta property=\"og:locale\" content=\"en_US\"> <meta property=\"og:type\" content=\"article\"> <meta property=\"og:title\" content=\"Crypto analysts stunned by Lazarus Group\u2019s capabilities in $1.46B Bybit theft\"> <meta property=\"og:description\" content=\"The amount stolen last week surpasses what the group was able to steal in all of 2024.\"> <meta property=\"og:url\" content=\"https:\/\/cyberscoop.com\/bybit-lazarus-group-north-korea-ethereum\/\"> <meta property=\"og:site_name\" content=\"CyberScoop\"> <meta property=\"article:published_time\" content=\"2025-02-25T18:49:07+00:00\"> <meta property=\"article:modified_time\" content=\"2025-02-25T18:51:36+00:00\"> <meta property=\"og:image\" content=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/02\/crypto-analysts-stunned-by-lazarus-groups-capabilities-in-1-46b-bybit-theft-2.jpg\"> <meta property=\"og:image:width\" content=\"1920\"> <meta property=\"og:image:height\" content=\"1024\"> <meta property=\"og:image:type\" content=\"image\/jpeg\"> <meta name=\"author\" content=\"Matt Kapko\"> <meta name=\"twitter:card\" content=\"summary_large_image\">  <link rel=\"dns-prefetch\" href=\"\/\/securepubads.g.doubleclick.net\">\n<link rel=\"dns-prefetch\" href=\"\/\/use.typekit.net\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Feed\" href=\"https:\/\/cyberscoop.com\/feed\/\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Comments Feed\" href=\"https:\/\/cyberscoop.com\/comments\/feed\/\"> <link rel=\"stylesheet\" id=\"all-css-2\" href=\"https:\/\/cyberscoop.com\/wp-includes\/css\/dist\/block-library\/style.min.css?m=1739294329g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-6\" href=\"https:\/\/cyberscoop.com\/wp-content\/mu-plugins\/search\/elasticpress\/dist\/css\/related-posts-block-styles.min.css?m=1739821441g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-8\" href=\"https:\/\/cyberscoop.com\/wp-content\/themes\/scoopnewsgroup\/dist\/css\/frontend.css?m=1740183262g\" type=\"text\/css\" media=\"all\">\n<link rel=\"stylesheet\" id=\"typekit-css\" href=\"https:\/\/use.typekit.net\/itk2qbh.css?ver=9586249c695df0f3b26c\" media=\"all\"> <link rel=\"https:\/\/api.w.org\/\" href=\"https:\/\/cyberscoop.com\/wp-json\/\"><link rel=\"alternate\" title=\"JSON\" type=\"application\/json\" href=\"https:\/\/cyberscoop.com\/wp-json\/wp\/v2\/posts\/83629\"><link rel=\"EditURI\" type=\"application\/rsd+xml\" title=\"RSD\" href=\"https:\/\/cyberscoop.com\/xmlrpc.php?rsd\">\n<meta name=\"generator\" content=\"WordPress 6.7.2\">\n<link rel=\"shortlink\" href=\"https:\/\/cyberscoop.com\/?p=83629\">\n<link rel=\"alternate\" title=\"oEmbed (JSON)\" type=\"application\/json+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fbybit-lazarus-group-north-korea-ethereum%2F\">\n<link rel=\"alternate\" title=\"oEmbed (XML)\" type=\"text\/xml+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fbybit-lazarus-group-north-korea-ethereum%2F&format=xml\">   <link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=32\" sizes=\"32x32\">\n<link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=192\" sizes=\"192x192\">\n<link rel=\"apple-touch-icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=180\">\n<meta name=\"msapplication-TileImage\" content=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=270\"> <\/head><body class=\"post-template-default single single-post postid-83629 single-format-standard\" id=\"readabilityBody\"> <a href=\"https:\/\/cyberscoop.com\/bybit-lazarus-group-north-korea-ethereum\/#main\" class=\"skip-to-content-link visually-hidden-focusable\">Skip to main content<\/a> <\/p>\n<div class=\"ad ad--top ad--top-desktop\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p> <main id=\"main\" role=\"main\" tabindex=\"-1\"> <\/p>\n<div class=\"ad ad--top ad--top-mobile\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<section id=\"stickybar\" class=\"stickybar stickybar--event js-stickybar\">\n<div class=\"stickybar__details\" readability=\"5.12\">\n<div class=\"stickybar__info js-sticky-bar-content\" readability=\"32\">\n<p>Nominations can be submitted for the 2025 CyberScoop 50 awards!<\/p>\n<\/div>\n<p> <a class=\"stickybar__link button button-tertiary\" href=\"https:\/\/cyberscoop.com\/cyberscoop50\/\">Click here!<\/a> <\/div>\n<p> <button class=\"stickybar__close js-stickybar-close\" aria-controls=\"stickybar\"> <svg class=\"icon icon--close\" width=\"21\" height=\"22\" viewBox=\"0 0 21 22\" fill=\"none\"><path d=\"m.822.518-.805.805L9.695 11 .017 20.678l.805.805 9.678-9.678 9.677 9.678.806-.805L11.305 11l9.678-9.677-.806-.805-9.677 9.677L.822.518Z\" fill=\"currentColor\" \/><\/svg> <span class=\"visually-hidden\">Close<\/span> <\/button> <\/section>\n<article class=\"single-article content\">\n<div class=\"single-article__container js-single-article-content\">\n<header class=\"single-article__header \" readability=\"24.624338624339\">\n<div class=\"single-article__header-content\" readability=\"33.071625344353\">\n<ul class=\"single-article__eyebrow\">\n<li class=\"single-article__category\"> <a class=\"single-article__category-link\" href=\"https:\/\/cyberscoop.com\/bybit-lazarus-group-north-korea-ethereum\/\"> <span>Cybercrime<\/span> <\/a> <\/li>\n<\/ul>\n<p> The amount stolen last week surpasses what the group was able to steal in all of 2024. <\/p>\n<p>  <br \/>\n<audio id=\"audio-player\" src=\"https:\/\/wp-tts-cdn.api.scpnewsgrp.com\/cyberscoop\/83629\/english.openai.mp3\"><\/audio> <\/p>\n<div readability=\"11\">\n<div>\n<p>Listen to this article<\/p>\n<p>  <\/p>\n<p>0:00<\/p>\n<\/p><\/div>\n<p>  <\/p>\n<p> <span id=\"tts-tooltip\">Learn more.<\/span> <span> This feature uses an automated voice, which may result in occasional errors in pronunciation, tone, or sentiment. <\/span> <\/p>\n<\/div>\n<p>  <\/div>\n<div class=\"single-article__cover-wrap\">\n<figure class=\"single-article__cover\"> <img data-recalc-dims=\"1\" fetchpriority=\"high\" width=\"640\" height=\"341\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2025\/02\/crypto-analysts-stunned-by-lazarus-groups-capabilities-in-1-46b-bybit-theft.jpg?resize=640%2C341&ssl=1\" class=\"single-article__cover-image wp-post-image\" alt=\"Pyongyang, North Korea\" decoding=\"async\" fetchpriority=\"high\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/02\/crypto-analysts-stunned-by-lazarus-groups-capabilities-in-1-46b-bybit-theft-2.jpg 1920w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/02\/crypto-analysts-stunned-by-lazarus-groups-capabilities-in-1-46b-bybit-theft-2.jpg?resize=300,160 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/02\/crypto-analysts-stunned-by-lazarus-groups-capabilities-in-1-46b-bybit-theft-2.jpg?resize=768,410 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/02\/crypto-analysts-stunned-by-lazarus-groups-capabilities-in-1-46b-bybit-theft-2.jpg?resize=1024,546 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/02\/crypto-analysts-stunned-by-lazarus-groups-capabilities-in-1-46b-bybit-theft-2.jpg?resize=1536,819 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/02\/crypto-analysts-stunned-by-lazarus-groups-capabilities-in-1-46b-bybit-theft-2.jpg?resize=600,320 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/02\/crypto-analysts-stunned-by-lazarus-groups-capabilities-in-1-46b-bybit-theft-2.jpg?resize=1200,640 1200w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/02\/crypto-analysts-stunned-by-lazarus-groups-capabilities-in-1-46b-bybit-theft-2.jpg?resize=1500,800 1500w\" sizes=\"(max-width: 1200px) 100vw, 1200px\"><figcaption> (Getty Images) <\/figcaption><\/figure>\n<\/p><\/div>\n<\/header>\n<div class=\"single-article__content\">\n<div class=\"single-article__content-inner has-drop-cap\"> <html readability=\"57.348361432089\"><body readability=\"116.83634074696\"><\/p>\n<p>Last week\u2019s $1.46 billion Ethereum theft by North Korean-linked Lazarus Group has sent shockwaves through the cybercrime ecosystem, as it has not only joined the ranks of the largest known financial thefts in history but also demonstrated that the group\u2019s skillset is presenting new challenges for defenders. <\/p>\n<p>In the wake of the theft, numerous experts told CyberScoop that the group\u2019s unprecedented speed and scale in laundering the stolen funds demonstrate its increased capability to conduct such brazen attacks. <\/p>\n<p>\u201cWhat sets this hack apart is the extraordinary pace of post-hack laundering,\u201d Ari Redbord, global head of policy at TRM Labs, said in an email.<\/p>\n<p>Within two days of the attack, the North Korean threat group funneled $160 million through illicit channels, \u201can amount that would have been unimaginable to move this quickly just a year ago,\u201d Redbord said. \u201cThis shift raises alarming questions about whether North Korea\u2019s laundering capacity has expanded. Criminal financial networks have never moved this quickly to process funds.\u201d<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>The Bybit attack was attributed to Lazarus Group by multiple blockchain analytics firms tracking crypto crime. North Korea\u2019s government created the notorious collective of malicious hackers as early as 2007, according to the U.S. government.<\/p>\n<p>TRM Labs determined the initial funding for the attacker\u2019s contract came from a known North Korean wallet and linked laundering patterns to previous North Korea state-sponsored attacks. <\/p>\n<p>\u201cFunds stolen from Bybit are being commingled with funds from multiple Democratic People\u2019s Republic of Korea-attributed thefts,\u201d Tom Robinson, co-founder and chief scientist at Elliptic, said in an email.<\/p>\n<p>Lazarus Group\u2019s hastened laundering of stolen Ethereum tokens marks a dangerous evolution in how nation-state attackers exploit financial systems, signaling an urgent need for stronger cross-border cooperation, enhanced blockchain monitoring and stricter anti-money laundering enforcement, Redbord said. <\/p>\n<p>Crypto crime analysts, law enforcement and national security agencies have surged support for Bybit in the wake of the attack in a bid to freeze or seize the stolen funds. More than $40 million of the stolen funds were frozen within a day, according to Redbord. As of Monday, Elliptic said it had facilitated the freezing of $243,000 in stolen assets. <\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Yet, Lazarus Group\u2019s illicit haul is enormous, exceeding the total amount North Korea-affiliated attackers stole from crypto platforms in all of 2024. Chainalysis attributed <a href=\"https:\/\/www.chainalysis.com\/blog\/crypto-hacking-stolen-funds-2025\/\">$1.34 billion in cryptocurrency theft<\/a> to North Korea state-backed groups, representing 61% of the total amount stolen by all attackers last year.<\/p>\n<p>The worth of Lazarus Group\u2019s stolen funds also exceeds the worth of Ethereum holdings belonging to the Ethereum Foundation, a nonprofit organization that supports the Ethereum ecosystem. Ethereum Foundation\u2019s cryptocurrency holdings, 99.5% of which were held in Ethereum, amounted to $788.7 million as of Oct. 31, according to the organization\u2019s <a href=\"https:\/\/ethereum.foundation\/report-2024.pdf\">annual report<\/a>.<\/p>\n<p>North Korea-linked attackers have <a href=\"https:\/\/www.elliptic.co\/blog\/bybit-hack-largest-in-history\">stolen more than $6 billion in cryptocurrency since 2017<\/a>, according to Elliptic.<\/p>\n<p>Ben Zhou, Bybit\u2019s co-founder and CEO, called for a \u201c<a href=\"https:\/\/x.com\/benbybit\/status\/1894396086439350751\">war against Lazarus<\/a>,\u201d announcing a <a href=\"https:\/\/www.lazarusbounty.com\/en\/\">bounty site<\/a> Tuesday designed to trace the stolen funds, and eventually assist other victims of Lazarus.<\/p>\n<p>Two hours after the attack Friday, Zhou held a <a href=\"https:\/\/www.youtube.com\/watch?v=Pso66cnmdWk\">livestream for Bybit clients<\/a>, explaining how the hack occurred during a cold wallet transfer, a transaction the cryptocurrency exchange typically does every two-to-three weeks. <\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>\u201cWhen we saw the transaction it was business as usual,\u201d Zhou said on the livestream. \u201cI was the last signer of this transaction. When this transaction came, it was a normal URL.\u201d<\/p>\n<p>Zhou said he clicked on the link but didn\u2019t fully check the destination address obscured by code, a common issue with Ethereum cold wallet transfers. \u201cAfter I signed it, 30 minutes later then we got the emergency call that our cold Ethereum wallet is drained,\u201d Zhou said.<\/p>\n<p>Bybit experienced a hundred-fold increase in withdrawals shortly after news of the attack surfaced, but Zhou assured clients that Bybit\u2019s treasury can cover the stolen funds and said no other balances were compromised. Zhou placed the total amount of stolen cryptocurrency at 401,000 Ethereum tokens. <\/p>\n<p>\u201cThis incident has left the incident more aware than ever before that we need to harden our cyber defenses,\u201d Redbord said. \u201cCrypto projects can protect themselves from hacks and exploits by implementing a multi-layered defense strategy, such as regular security audits, robust encryption, multi-signature wallets, and secure coding practices.\u201d<\/p>\n<p><\/body> <\/p>\n<footer class=\"single-article__footer\" readability=\"3.5244140625\">\n<div class=\"author-card\" readability=\"14\">\n<div class=\"author-card__avatar\">\n<figure class=\"author-card__image-wrap\"> <img data-recalc-dims=\"1\" decoding=\"async\" class=\"author-card__image\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2025\/02\/crypto-analysts-stunned-by-lazarus-groups-capabilities-in-1-46b-bybit-theft-1.jpg?w=640&ssl=1\" alt=\"Matt Kapko\"> <\/figure>\n<\/p><\/div>\n<p><h4 class=\"author-card__name\">Written by Matt Kapko<\/h4>\n<p> Matt Kapko is a reporter at CyberScoop. His beat includes cybercrime, ransomware, software defects and vulnerability (mis)management. The lifelong Californian started his journalism career in 2001 with previous stops at Cybersecurity Dive, CIO, SDxCentral and RCR Wireless News. Matt has a degree in journalism and history from Humboldt State University. <\/p>\n<\/p><\/div>\n<div class=\"single-article__tags-container\">\n<h4 class=\"single-article__tags-title\">In This Story<\/h4>\n<\/p><\/div>\n<\/footer>\n<p> <\/html><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"single-article__ads js-single-article-sidebar\">\n<div class=\"ad ad--sidebar js-single-article-sidebar-5 ad--rightrail_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-4 ad--rightrail_2 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-3 ad--rightrail_3 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div><\/div>\n<\/article>\n<div class=\"popular-stories popular-stories--single-post\">\n<div class=\"popular-stories__container\">\n<h2 class=\"popular-stories__title\"> More Scoops <\/h2>\n<p>  <\/div>\n<p>\n<\/div>\n<p> <\/p>\n<section class=\"latest-podcasts\">\n<h2 class=\"latest-podcasts__title\"> Latest Podcasts\t<\/h2>\n<\/section>\n<div class=\"top-categories\">\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Government<\/h3>\n<\/p><\/div>\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Technology<\/h3>\n<\/p><\/div>\n<\/p><\/div>\n<p> <\/main> <\/p>\n<div class=\"ad ad--bottom \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div id=\"interstitial\" class=\"welcome__container\"> <button id=\"close-modal-1\" class=\"welcome__clickable_area\"><\/button> <\/p>\n<div class=\"welcome__ad_wrapper\">\n<p> <button id=\"close-modal-3\" class=\"welcome__continue-button\">Continue to CyberScoop<\/button> <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<p>   <\/body> <a href=\"https:\/\/cyberscoop.com\/bybit-lazarus-group-north-korea-ethereum\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Crypto analysts stunned by Lazarus Group\u2019s capabilities in $1.46B Bybit<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[2531,2532,2701,3734,337,282,78,3771,3772,1010,1365,647,2323],"tags":[2534,2535,2704,3736,340,286,86,3773,3774,242,1366,240,2326],"class_list":["post-7394","post","type-post","status-publish","format-standard","hentry","category-blockchain","category-chainalysis","category-crypto","category-crypto-crime","category-cryptocurrency","category-cybercrime","category-cybersecurity","category-elliptic","category-ethereum","category-lazarus-group","category-money","category-north-korea","category-trm-labs","tag-blockchain","tag-chainalysis","tag-crypto","tag-crypto-crime","tag-cryptocurrency","tag-cybercrime","tag-cybersecurity","tag-elliptic","tag-ethereum","tag-lazarus-group","tag-money","tag-north-korea","tag-trm-labs"],"featured_image_urls":{"full":"","thumbnail":"","medium":"","medium_large":"","large":"","1536x1536":"","2048x2048":"","chromenews-featured":"","chromenews-large":"","chromenews-medium":""},"author_info":{"display_name":"Cyber Scoop","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/cyberscoop\/"},"category_info":"<a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/blockchain\/\" rel=\"category tag\">blockchain<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/chainalysis\/\" rel=\"category tag\">Chainalysis<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/crypto\/\" rel=\"category tag\">crypto<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/crypto-crime\/\" rel=\"category tag\">crypto crime<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/cryptocurrency\/\" rel=\"category tag\">cryptocurrency<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/cybercrime\/\" rel=\"category tag\">cybercrime<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/cybersecurity\/\" rel=\"category tag\">Cybersecurity<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/elliptic\/\" rel=\"category tag\">Elliptic<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/ethereum\/\" rel=\"category tag\">Ethereum<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/lazarus-group\/\" rel=\"category tag\">Lazarus Group<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/money\/\" rel=\"category tag\">Money<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/north-korea\/\" rel=\"category tag\">North Korea<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/trm-labs\/\" rel=\"category tag\">TRM Labs<\/a>","tag_info":"TRM Labs","comment_count":"0","jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/7394","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=7394"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/7394\/revisions"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=7394"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=7394"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=7394"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

{"id":7394,"date":"2025-02-25T12:49:07","date_gmt":"2025-02-25T18:49:07","guid":{"rendered":"https:\/\/cyberscoop.com\/?p=83629"},"modified":"2025-02-25T12:49:07","modified_gmt":"2025-02-25T18:49:07","slug":"crypto-analysts-stunned-by-lazarus-groups-capabilities-in-1-46b-bybit-theft","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2025\/02\/25\/crypto-analysts-stunned-by-lazarus-groups-capabilities-in-1-46b-bybit-theft\/","title":{"rendered":"Crypto analysts stunned by Lazarus Group\u2019s capabilities in $1.46B Bybit theft"},"content":{"rendered":"