KelpDAO suffers $290 million heist tied to Lazarus hackers
2026-04-21T07:23:31Z•02134a2a8b166108189909ed52f6885ed26cfc4e960b4c046468f8d8d3ac4406
GentlemenLazarusSystemBCapple-app-storebackup-and-bcdrbotnetcrypto-wallet-malwarecryptocurrency-theftdata-breachhelpdesk-impersonationios-malwarejavascriptmicrosoft-teamsnorth-koreaout-of-band-patchphishingprotobuf.jsransomwareremote-code-executionscattered-spiderseed-phrase-theftsupply-chainvercelwebsite-defacementwindows-server
What happened
A cluster of high-impact security incidents and trends: a $290M crypto heist against KelpDAO is attributed to North Korean Lazarus actors; 26 malicious iOS wallet apps impersonating popular wallets (MetaMask, Coinbase, Trust Wallet, OneKey) were found in China's Apple App Store stealing seed/recovery phrases; the Gentlemen ransomware affiliate is now leveraging a ~1,570‑host SystemBC botnet for bot-powered attacks; Seiko USA suffered a website defacement with alleged Shopify customer DB theft; Vercel disclosed a breach with stolen data being sold; Microsoft warns of growing abuse of Teams for外
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 02134a2a8b166108189909ed52f6885ed26cfc4e960b4c046468f8d8d3ac4406
- Enrichment time
- 2026-04-21T07:23:31Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.