2024 Crypto Crime Report: North Korea’s Heists, Malware, and New Regulations

In 2024, global regulators have stepped up their efforts to combat fraud and money laundering in the cryptocurrency market. Among the key initiatives are the European Union’s Markets in Crypto-Assets (MiCA) regulation and the United States’ stablecoin legislation. These measures are designed to tackle crypto scams, which have already cost the industry over $2.3 billion.

Governments around the world are working together to create unified regulatory frameworks. The goal is to foster innovation in the crypto space while addressing issues like consumer protection and anti-money laundering (AML). This cooperation is crucial for making the crypto ecosystem safer and more transparent.

North Korea’s Lazarus Group: A Growing Threat

Cybercriminals, especially North Korea’s Lazarus Group, have been behind several major cyberattacks and frauds, stealing hundreds of millions of dollars. One of the biggest examples occurred in April, when a phishing campaign targeted blockchain and angel investing groups on the Telegram app.

The attackers pretended to be representatives from well-known companies, set up fake meetings, and distributed malware disguised as a tech-support scam. Lazarus operatives also used fake documents and credentials to infiltrate blockchain firms, allowing them to carry out more serious attacks on crypto platforms.

Beware of BeaRAT

In 2024, a new version of the BeaRAT malware emerged, specifically targeting macOS users. The malware spread through a fake video call application and was designed to steal important information, including cryptocurrency wallet details. With cybercriminals pulling off heists worth up to $55.48 million in one attack, it’s clear that stronger defenses against these kinds of threats are urgently needed.

Crypto Money Laundering: Ethereum, Bitcoin, and TRON Still Top Choices

Ethereum, Bitcoin, and TRON remain the most popular cryptocurrencies for money laundering. By 2024, Tornado Cash had processed $1.455 billion in withdrawals, a 53% increase from the previous year. Meanwhile, eXch saw its deposits soar by 355% due to its lack of cooperation with law enforcement.

Railgun has introduced new techniques to verify the authenticity of funds without violating users’ anonymity. This innovative approach is a step forward in anti-money laundering efforts and could serve as a model for future solutions, balancing transparency with privacy.