Lazarus Group usually impersonates an investor to target prominent DeFi projects, blockchain security firm SlowMist said.