North Korea’s Lazarus confirmed to be behind years of crypto hacks in Japan. Here's how to stay safe from phishing according to Japan's National Police Advisory

Japan’s national police have pinned the Lazarus hacking group as the organization behind several years of crypto-related cyber attacks. The National Police Agency (NPA) and the FSA has sent a warning to crypto businesses asking them to stay vigilant of phishing attacks, only the fifth time such a warning has been given out. Lazarus initially targeted banks in various countries, but recently it has been aiming at crypto assets that are managed more loosely.

The statement warns that the Lazarus group uses social engineering to orchestrate phishing attacks — impersonating executives of a target company to try and bait employees into clicking malicious links or attachments. Phishing is a common method used by the Lazarus Group.

Tip 1:

The NPA and FSA urged targeted companies to keep their “private keys in an offline environment” and to “not open email attachments or hyperlinks carelessly.”

Tip 2:

The statement added that individuals should “not download files from sources other than those whose authenticity can be verified, especially for applications related to cryptographic assets.”

Tip 3:

The NPA also suggested that digital asset holders “install security software,” strengthen identity authentication mechanisms by “implementing multi-factor authentication” and not use the same password for multiple devices or services.

Stay vigilant, and stay safe against phishing!

Source: https://cointelegraph.com/news/north-korea-s-lazarus-behind-years-of-crypto-hacks-in-japan-police