The hacker group used “spear-phishing” attacks to gain access to crypto exchanges. And it proved to be effective.