According to Finance Feeds, the North Korean hacker group Lazarus Group has recently shifted its attack targets to individual investors, stealing over $5.2 million from a merchant through malicious software on May 24th. The stolen funds involve multiple wallet types, including exchange wallets, multi signature wallets, and external accounts. Blockchain analyst ZackXBT tracked and found that hackers have transferred approximately 1000 ETH through the Tornado Cash mixer. Security experts suggest that individual investors take protective measures: use hardware wallets to store large assets, enable two factor authentication, regularly update software patches, be alert to suspicious links, and regularly check transaction records. This attack marks a shift in the organization's strategy from targeting institutions to individual investors.