Those behind the theft of 342,000 Ethereum from South Korean cryptocurrency exchange Upbit have started spreading the funds to various ETH addresses.