Lazarus, the well-known hacking group responsible for the WannaCry ransomware attack from last year, as well as the attack on the Bangladesh Central Bank and Sony, is now targeting global financial firms and Bitcoin adopters with a phishing campaign dubbed “HaoBao.”

The phishing campaign was discovered by McAfee Labs in mid-January. The way it works

It was well known in 2012 that Dropbox suffered a data breach when its user names and passwords were compromised. But at the time, Dropbox did not admit the breadth of the compromise. Last week, they admitted that 68 million users’ credentials were actually compromised in the 2012 hacking.

Apparently, Dropbox became aware of the