BitoPro releases attack report: The attack was carried out by Lazarus Group, using AWS hijacking for script implantation

According to Foresight News, Taiwanese cryptocurrency trading platform BitoPro has released an attack report, analyzing the methods and discovering that the attack was carried out by North Korean Lazarus Group. Hackers implanted a Trojan into their computers through social attacks, then hijacked AWS Session Tokens to bypass identity authentication and implanted malicious scripts into the hot wallet host. Foresight News previously reported that Taiwan's cryptocurrency trading platform BitoPro was hacked on May 8th, resulting in a loss of approximately $11.5 million. The stolen funds are then deposited into Tornado Cash or cross chain into Bitcoin through THORChain and deposited into Wasabi.