# Lazarus · Drain Watch

3 incidents, 0 live. JSON: https://drains.watch/t/lazarus.json · RSS: https://drains.watch/t/lazarus/feed.xml

- [Upbit loses about $36M as Solana hot wallet is drained; Lazarus suspected](https://drains.watch/i/upbit-solana-hot-wallet-hack-nov-2025) (closed, Critical, Contained, since Nov 27, 2025)
- [Kaspersky: North Korea's BlueNoroff uses generative AI to speed up malware in GhostCall and GhostHire crypto attacks](https://drains.watch/i/bluenoroff-ghostcall-ghosthire-genai-malware-oct-2025) (closed, Medium, Still active, since Oct 28, 2025)
- [North Korea's BlueNoroff used deepfaked executives on a Zoom call to infect a crypto foundation employee's Mac](https://drains.watch/i/bluenoroff-deepfake-zoom-crypto-foundation-jun-2025) (closed, Medium, Still active, since Jun 11, 2025)