Security firm: LummaC2 virus infected North Korean hacking devices linked to the Bybit theft.

Cybersecurity firm Hudson Rock discovered an infected device while analyzing logs from the LummaC2 information-stealing malware, whose operator is suspected to be a malware developer within a North Korean state-sponsored hacking group. This device had previously been used to build the infrastructure that supported the $1.4 billion theft from the cryptocurrency exchange Bybit in February 2025.