Overview

• On Oct. 10, Binance founder Changpeng Zhao shared a Google alert that said a government‑backed actor likely tried to access his account.
• Zhao speculated the attempt could involve North Korea’s Lazarus Group, though no attribution or compromise has been confirmed.
• Google’s guidance says such warnings reflect likely phishing or malware attempts rather than evidence that an account was accessed.
• CoinCentral reported the alert referenced an effort to steal Zhao’s password, and Zhao urged followers to stay vigilant while noting the account holds nothing sensitive.
• Recent reporting ties Lazarus to major crypto heists, including a record Bybit theft in 2025, and Elliptic estimates such operations account for a significant share of North Korea’s economy.