North Korea’s Lazarus ‘Using New Coin Mixer to Launder Crypto’ – and It’s a ‘Blender Re-brand’

Last updated:
Author
Author
Tim Alper
About Author

Tim Alper is a British journalist and features writer who has worked at Cryptonews.com since 2018. He has written for media outlets such as the BBC, the Guardian, and Chosun Ilbo. He has also worked...

Last updated:
Why Trust Cryptonews
Cryptonews has covered the cryptocurrency industry topics since 2017, aiming to provide informative insights to our readers. Our journalists and analysts have extensive experience in market analysis and blockchain technologies. We strive to maintain high editorial standards, focusing on factual accuracy and balanced reporting across all areas - from cryptocurrencies and blockchain projects to industry events, products, and technological developments. Our ongoing presence in the industry reflects our commitment to delivering relevant information in the evolving world of digital assets. Read more about Cryptonews
Ad DisclosureWe believe in full transparency with our readers. Some of our content includes affiliate links, and we may earn a commission through these partnerships.
An image showing a hooded hacker using a computer against a backdrop of a North Korean flag.
Source: yurchello108/Adobe

The North Korean hacking group Lazarus has turned to a new crypto mixer named Sinbad, the blockchain analytics firm Elliptic has claimed.

Per an Elliptic post and a report from Yonhap, Larazrus is “affiliated with North Korea’s Reconnaissance General Administration.” The United States and South Korea have blamed Lazarus and affiliated groups for multiple high-level crypto hacks.

Security providers and government agencies believe Pyongyang-linked groups have used coin mixers to anonymize transactions – allowing the North to build up a vast fortune in crypto. They claim this has been used to fund Pyongyang’s costly missile programs.

Blender was hit with sanctions by the US State Department last year. Washington claimed it was being used “to launder funds stolen by North Korea.” Blender shut down in April 2022, but some believe the service’s operator vanished with some $22 million worth of Bitcoin (BTC).

But Elliptic claimed that Blender was now “back” – in a new guise.

The blockchain analytics firm Chainalysis also claimed North Korean hackers sent “more than $24 million to Sinbad,” Herald Kyungjae reported.

What Is a Coin Mixer? And Why Do Lazarus and North Korea Allegedly Use Them?

Coin mixers are services that are used to anonymize blockchain transactions. Using mixers makes it hard for instigators to trace a coin’s original sender.

If they are used repeatedly, it can become difficult to trace transactions. This makes it hard to see whether coins obtained illegally have been transferred elsewhere – or swapped for cash.

Elliptic claimed that Sinbad was released in “early October last year,” and claimed that despite its relatively small size, it was quickly put to use by Lazarus.

The firm claimed that to date, Lazarus has sent “tens of millions of dollars” been sent through Blender – and that it was “highly likely to have re-launched as Sinbad.”

Elliptic claimed its analysis “indicates” that Sinbad “is in fact highly likely to be a rebrand of Blender, with the same individual or group responsible for it.”

The company explained:

“The on-chain pattern of behavior is very similar for both mixers, including the specific characteristics of transactions, and the use of other services to obfuscate their transactions.”

And, Elliptic noted,

“Both services have a clear nexus to Russia, with Russian-language support and websites.”

The US Treasury Department last year blamed Lazarus for the Axie Infinity $620 million raid – the biggest crypto hack in history.

A number of suspected Lazarus members have been hit with independent sanctions from both the United States and South Korea.

More Articles

Price Analysis
Trump Wants Bitcoin at $150,000 – Will His Return Spark the Next Big Rally?
Arslan Butt
Arslan Butt
2024-12-11 17:38:09
Bitcoin News
MicroStrategy’s Nasdaq 100 Status Tied to ICB Classification: Bloomberg Intelligence
Hongji Feng
Hongji Feng
2024-12-11 17:06:40
Crypto News in numbers
editors
Authors List + 66 More
2M+
Active Monthly Users Around the World
250+
Guides and Reviews Articles
8
Years on the Market
70
International Team Authors