Researchers gathered evidence from multiple attacks on cryptocurrency exchanges attributed to a threat actor named CryptoCore and established a strong link to the North Korean Lazarus APT group.