Slow Fog: CoinsPaid, Atomic, and Alphapo attackers may all be North Korean hacker group Lazarus Group

ChainCatcher message, SlowMist tweeted that the attackers of CoinsPaid, Atomic, and Alphapo may all be part of the North Korean hacker group Lazarus Group.

SlowMist stated that the address starting with TGGMvM received nearly 120 million TRX transferred from the address starting with TJF7md related to the Alphapo incident, and the TGGMvM starting address also received funds from the Coinspaid hot wallet through addresses starting with TNMW5i and TJ6k7a on July 22. The address starting with TNMW5i had previously received funds from the address used by the Atomic attacker. (Source link)