I didn't get passed the pay wall but my question is how do we know this?
What's the trail of evidence that leads to this conclusion.
What's the trail of evidence that leads to this conclusion.
Each APT usually utilises a specific set of techniques to commit these heists: https://attack.mitre.org/groups/
Obviously perfect correlation is not possible but set of utilised techniques are usually enough to pinpoint the specific APT.
Seems like most of this theft is happening when people port currency between exchanges and the bridge is vulnerable.
In this case: https://archive.ph/SUYp1