According to ChainCatcher, the North Korean hacker group Lazarus Group has recently turned its attack targets to individual investors, stealing more than $5.2 million through malware on May 24. The stolen funds involved exchange wallets, multi-signature wallets and external accounts. Blockchain analyst ZackXBT found that hackers had transferred about 1,000 ETH through Tornado Cash. Security experts recommend that individual investors use hardware wallets, enable two-factor authentication, update software regularly, be wary of suspicious links and check transaction records. This attack marks the organization's strategy shift from institutions to individual investors.