Global Cyber Pulse: 28 February 2025

Cyber Attack
February 28, 2025 | Cybersecurity
By Ashwani Mishra, Editor-Technology, 63SATS

The FBI has confirmed that North Korea’s Lazarus Group executed a record-breaking $1.5 billion heist on crypto exchange Bybit, prompting warnings to block suspicious transactions. In Belgium, authorities are investigating whether Chinese hackers infiltrated the State Security Service (VSSE), stealing classified emails.

Meanwhile, CrowdStrike’s latest report reveals a 150% surge in Chinese cyber espionage, with industries like finance and media facing intensified attacks. In the Philippines, the Army admitted to a cyber breach but denied data theft, despite claims that 10,000 military records were leaked.

FBI Links Lazarus Group to Record-Breaking $1.5B Bybit Crypto Heist

The FBI has confirmed that North Korea’s Lazarus Group orchestrated a $1.5 billion heist on crypto exchange Bybit—the largest in history. The attack occurred last Friday when hackers intercepted a scheduled transfer from Bybit’s cold wallet to a hot wallet, redirecting funds to their controlled blockchain address.

Authorities urged crypto service providers, including exchanges and DeFi platforms, to block transactions from known North Korean wallets. Lazarus, also tracked as TraderTraitor and APT38, has a history of large-scale financial cybercrime, fueling North Korea’s illicit operations through cryptocurrency theft and laundering.

Belgium Investigates Possible Chinese Hack on Intelligence Agency

Belgium’s federal prosecutor is probing allegations that Chinese hackers breached the country’s State Security Service (VSSE). Reports indicate that between 2021 and May 2023, attackers infiltrated the agency’s external email server, exfiltrating nearly 10% of all staff emails. The compromised server primarily handled communications with government bodies, law enforcement, and public prosecutors. Belgian media outlet Le Soir reported the breach on Wednesday.

If confirmed, this would mark a significant cyber espionage campaign targeting Belgium’s intelligence network. Authorities are working to assess the full extent of the breach and its potential national security implications.

CrowdStrike Reports 150% Surge in Chinese Cyber Espionage

Chinese cyber espionage operations surged by 150% in 2024, according to CrowdStrike’s newly released 2025 Global Threat Report. Industries such as finance, media, and manufacturing saw targeted cyberattacks spike by up to 300%. The report, published on February 27, highlights the growing threat posed by Chinese-backed groups like Volt Typhoon and Salt Typhoon.

CrowdStrike identified seven new China-linked adversaries last year and blocked over 330 hacking attempts. CrowdStrike warned: “China’s cyber espionage tactics, now amplified by AI-driven deception, demand a more proactive defense strategy.”

Philippine Army Confirms Cyberattack, Denies Data Theft

The Philippine Army has acknowledged a cyberattack following claims by hacking group Exodus Security that it breached military systems. Army spokesperson Col. Louie Dema-ala described the incident as an “illegal access attempt” but assured that it was swiftly contained with no confirmed data loss.

However, digital security advocacy group Deep Web Konek reported that 10,000 records, including sensitive military and personal details, were allegedly compromised. The leaked data is said to include ranks, addresses, medical records, and financial histories of active and retired personnel. Authorities are investigating the breach and reinforcing security measures.