CZ reports hacking attempt by Lazarus Group
Binance founder Changpeng Zhao (CZ) reported that he was targeted by a state-sponsored hacking attempt, allegedly conducted by the North Korean Lazarus Group. He shared the news on X (formerly Twitter), posting a screenshot of a Google warning stating that “government-backed attackers tried to steal your password.”
CZ clarified that “nothing important” was stored in the targeted account but emphasized the need for vigilance. “Google sometimes sends me these alerts. Maybe Lazarus? Stay SAFU,” he wrote, referencing Binance’s security slogan – “Secure Asset Fund for Users.”
The crypto community responded immediately. Crypto journalist Crypto Jargo noted that such Google alerts are rare and typically sent to journalists, researchers, and high-profile individuals in the finance and technology sectors. He added that this could be a false positive but still advised changing passwords, enabling 2FA via an app, and reviewing active sessions.
Earlier, CZ cautioned the crypto community about fresh cyberattacks from North Korean hacker groups, who disguise themselves as job applicants or IT professionals to infiltrate firms and gain access to user data and internal systems.
Lazarus Group is one of the most active hacker organizations backed by the North Korean regime. Since 2017, it has stolen over $6 billion in cryptocurrencies, including the Bybit hack in February 2025 – the largest ever, worth $1.5 billion. Analysts estimate that North Korea has already stolen more than $2 billion in digital assets this year – triple the amount from 2022.
Experts attribute the surge in attacks to sanctions pressure on Pyongyang. Lazarus increasingly relies on phishing, deepfakes, and social engineering to target crypto exchanges and major investors.
The incident involving CZ once again underscores the critical importance of cybersecurity in the crypto industry, even for those who helped establish standards like SAFU (Secure Asset Fund for Users).
Earlier, CZ cautioned the crypto community about fresh cyberattacks from North Korean hacker groups, who disguise themselves as job applicants or IT professionals to infiltrate firms and gain access to user data and internal systems.
Lazarus Group is one of the most active hacker organizations backed by the North Korean regime. Since 2017, it has stolen over $6 billion in cryptocurrencies, including the Bybit hack in February 2025 – the largest ever, worth $1.5 billion. Analysts estimate that North Korea has already stolen more than $2 billion in digital assets this year – triple the amount from 2022.
Experts attribute the surge in attacks to sanctions pressure on Pyongyang. Lazarus increasingly relies on phishing, deepfakes, and social engineering to target crypto exchanges and major investors.
The incident involving CZ once again underscores the critical importance of cybersecurity in the crypto industry, even for those who helped establish standards like SAFU (Secure Asset Fund for Users).
Recommended