STRIKE0 / OFFENSIVE SECURITYAUTONOMOUS RED TEAMING / HUMAN-DIRECTED
PUBLIC INCIDENT DOSSIER / MAY 2024
THEFT / FBI-ATTRIBUTED

DMM Bitcoin
Security incident.

US and Japanese authorities attributed a USD 308 million Bitcoin theft to North Korean cyber actors.

$308M
DIGITAL ASSETS STOLENValue at the time of the attack, not an estimate of eventual recovery.All incidents ↗
01 / DOCUMENTED FINDINGSPUBLIC-SOURCE ANALYSIS
WHAT HAPPENED

What the evidence shows.

The FBI described employee social engineering and compromised third-party wallet-operation communications that led to a manipulated legitimate transaction request.

MEASUREMENT / INTERPRETATION

What the number means.

Value at the time of the attack, not an estimate of eventual recovery.

CONTROL QUESTIONS

How to test resilience.

Vendor access assurance, human transaction verification, privileged session security and anomalous transfer review.

Read cited source ↗
TURN LESSONS INTO VALIDATION

Find the path before an attacker does.

Discuss a scoped assessment ↗