FBI
CompanyThreat actors named alongside
Source: RedTeamDaily stories that mention bothSecurity timeline
- Named in breach reports by Help Net SecurityBinance reports record $6.3 billion crypto theft, possibly via compromised DevOps engineer laptop
- Named in ransomware reports by CyberScoopUkrainian Hive and Nefilim ransomware affiliate Artem Stryzhak sentenced to 70 months in prison
Recent news
FBI blames North Korean TraderTraitor group for $6.3B Binance crypto theft
Binance attributed the $6.3 billion theft to a compromised DevOps engineer's laptop, which gave attackers access to a withdrawal service container and let them authorise unauthorised withdrawals. The FBI has attributed the attack to North Korea's TraderTraitor group, linked to Lazarus, and has published wallet addresses tied to the theft. Binance says it has replenished about 95 percent of the stolen assets, resumed withdrawals in phases, and recorded about $3.64 billion in net outflows.
FBI attributes Binance hack to North Korea's TraderTraitor and flags over 600 addresses
The FBI has formally attributed the reported $6 billion Binance hack to North Korea's TraderTraitor group. The agency has flagged more than 600 cryptocurrency addresses tied to the heist, which the attackers are using to launder the stolen funds.
FBI and Secret Service join response to Binance's $6.3B hack
US agencies, including the FBI and Secret Service, are investigating a theft of about $6.3 billion from Binance and helping trace the stolen assets. Binance says around $3 billion has been frozen. The article does not describe the attack method or affected systems.
Binance reopens withdrawals after major hack; THORChain co-founder opposes protocol freeze
Binance has reopened withdrawals following a hack the article calls the largest ever in crypto, and about $3.6 billion reportedly left the exchange on reopening. A THORChain co-founder argued that the protocol should not be halted to comply with FBI demands for a coin freeze.
FBI blames North Korea's TraderTraitor for $6.3 billion Binance theft
The FBI and US Secret Service allege that North Korean hackers, attributed to TraderTraitor, stole more than $6.3 billion from Binance last week. The agencies have urged the cryptocurrency industry to block transactions connected to the theft.
Binance suffers $6.3bn crypto heist, FBI blames North Korea
Binance was hit by a theft of more than $6 billion in virtual assets from customer accounts, reported as $6.3bn, on or about 29 October 2026. The FBI's alert, published 31 October, attributes the attack to North Korea, and Bitdefender reports suspicions that the TraderTraitor group was involved. Investors have withdrawn $3.6bn (£2.7bn) and withdrawals have resumed.
FBI links 628 crypto wallet addresses to North Korea's TraderTraitor over Binance hack
The FBI has linked 628 crypto wallet addresses to TraderTraitor, a group it attributes to North Korea, following the Binance hack described as $6.3 billion. The agency has asked services to block transfers involving the stolen funds. The article is brief and gives no further technical detail.
Binance reports record $6.3 billion crypto theft, possibly via compromised DevOps engineer laptop
Binance said an initial investigation points to a compromised DevOps engineer's laptop that gave an attacker access to a service container, from which unauthorised withdrawals were submitted. The company found no evidence of a wallet private key leak, and co-CEO Richard Teng said the attack was more complex than one engineer's permissions. TRM Labs and Chainalysis link the theft to TraderTraitor, while Elliptic says about $3.3 billion was moved into assets that cannot be frozen.
Ukrainian Hive and Nefilim ransomware affiliate Artem Stryzhak sentenced to 70 months in prison
Artem Aleksandrovych Stryzhak, a 36-year-old Ukrainian national, was sentenced in federal court in Brooklyn to 70 months for his role as an affiliate of the Nefilim and Hive ransomware operations between mid-2018 and late 2021. He pleaded guilty in December 2025 after being arrested in Spain in June 2024 and extradited in April 2025. Victims included hospitals, government entities, law firms and an oil and gas transportation company, and his alleged co-conspirator Volodymyr Tymoshchuk remains at large with an $11 million reward on offer.