https://threats.osmansonmez.com Real-time alerts on cryptocurrency activities linked to North Korea, Iran, and Russia. Free public threat intelligence for researchers and compliance professionals. en-us Wed, 25 Feb 2026 03:09:39 GMT © 2024 Osman Sonmez - For Research & Public Interest api@osmansonmez.com (Osman Sonmez) api@osmansonmez.com (Osman Sonmez) https://threats.osmansonmez.com/logo.png https://threats.osmansonmez.com https://threats.osmansonmez.com/north-korea#bybit-2025 bybit-2025-02-21 Fri, 21 Feb 2025 14:30:00 GMT Largest cryptocurrency hack in history. Lazarus Group drained 401,346 ETH from Bybit cold wallet through multisig UI manipulation. Funds actively being dispersed. NORTH KOREA CRITICAL NSCTIP https://threats.osmansonmez.com/north-korea dmm-laundering-2025-02-20 Thu, 20 Feb 2025 08:15:00 GMT $12M moved from DMM Bitcoin hack wallets through YoMix mixer. Lazarus Group continuing to launder May 2024 theft proceeds. NORTH KOREA HIGH NSCTIP https://threats.osmansonmez.com/russia garantex-new-wallets-2025-02-19 Wed, 19 Feb 2025 16:45:00 GMT 5 new Ethereum addresses showing transaction patterns consistent with OFAC-sanctioned Garantex exchange operations. RUSSIA HIGH NSCTIP https://threats.osmansonmez.com/iran irgc-mining-2025-02-18 Tue, 18 Feb 2025 11:20:00 GMT 25% increase in Bitcoin mining rewards routed to known IRGC-linked wallets. Estimated $8M monthly output. IRAN HIGH NSCTIP https://threats.osmansonmez.com/clusters wazirx-movement-2025-02-15 Sat, 15 Feb 2025 09:00:00 GMT Approximately $5M from July 2024 WazirX hack moved through new intermediary wallets. NORTH KOREA MEDIUM NSCTIP https://threats.osmansonmez.com/api ofac-update-2025-02-10 Mon, 10 Feb 2025 15:00:00 GMT U.S. Treasury added 3 new cryptocurrency addresses to the Specially Designated Nationals list related to DPRK activities. NORTH KOREA INFO NSCTIP