---
id: 6997
title: "TraderTraitor: Deep Dive"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/north-korean-tradertraitor-crypto-heist"
published_at: "2025-07-28T13:17:56Z"
tags: ["cloud", "supply-chain", "threat-intelligence", "cryptocurrency", "apt", "north-korea", "lazarus", "traderraitor"]
phying_url: "https://phying.com/item/6997"
lang: en
---

# TraderTraitor: Deep Dive

## Summary

Wiz Threat Research profiles TraderTraitor, the North Korean Lazarus subgroup behind the $1.5B Bybit hack and DMM's $308M heist — tracing its shift from phishing to supply-chain and cloud attacks.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2025-07-28T13:17:56Z
- **Original:** https://www.wiz.io/blog/north-korean-tradertraitor-crypto-heist
- **Phying News:** https://phying.com/item/6997