ZachXBT also analyzed that the Binance hackers were suspected to be from the North Korean hacking group Lazarus Group. What is Lazarus Group? Lazarus Group is a hacking group identified by the US government as being supported by the North Korean state and linked to North Korean intelligence agencies. It is not an ordinary civilian hacking group, but rather a professional cyberattack force with long-term organizational capabilities, engaged in both cyber intelligence activities and financial theft. The US Treasury Department added it to its sanctions list in 2019, noting its affiliation with North Korea's main intelligence agency—the Reconnaissance General Bureau (RGB). According to investigations by the US Treasury Department and the FBI, North Korean-linked hacking activities, in addition to intelligence gathering, also aim to obtain funding. The US government believes that some of the illicit proceeds are used to support North Korea's weapons and missile programs. Their common attack strategy is not to directly crack blockchain cryptography, but rather to find easier-to-break links, such as employee social engineering, malware, compromised development tools, and signature and approval processes. This also explains why exchanges with strong technical teams can still be vulnerable to major attacks. In short: Lazarus is not a hacker group that simply seeks personal gain, but a cyberattack force that the US government has identified as having state-sponsored backing and that combines intelligence activities with financial theft.