South Korea Government Sanctions North Korean Hackers Over $1.3B Crypto Theft

by

As a seasoned crypto investor with a keen eye for global affairs, I find myself constantly monitoring the ever-evolving landscape of digital assets and geopolitics. The recent sanctions imposed by South Korea on North Korean individuals associated with the 313th General Bureau, a unit linked to the Lazarus Group, have raised alarm bells in the crypto community.

As an analyst, I’ve noticed that North Korea remains under intense global scrutiny due to its contentious actions and advancements in weapons development. Recently, on December 26th, I learned that South Korea took action by adding several individuals to their blacklist. Among those listed are Park Heung-ryong, Yoon Jeong-sik, Ri Il-jin, and Kim Gyeong-il.

As stated in a press release on Thursday, these individuals belong to the 313th General Bureau, a subdivision within North Korea’s Workers’ Party’s Munitions Industry Department, frequently linked to the infamous Lazarus Group. Starting from December 30, they will be formally added to South Korea’s list of sanctions.

North Korean Cyber Activities and Crypto Theft

The 313th Bureau has a reputation for sending a significant number of North Korean tech workers overseas, to places like China, Russia, Southeast Asia, and Africa. These individuals often work undercover, pretending to be employees of organizations linked to the government, such as the Ministry of Defense. While they maintain this disguise, they take on tasks from IT firms across the globe.

It is thought that the team utilizes sophisticated methods such as hacking, phishing schemes, and malicious software attacks to breach crypto wallets and trading platforms. As per South Korean officials, the 313th Bureau and its associates have played a substantial role in the $1.3 billion worth of digital assets allegedly stolen by North Korean cybercriminals this year, as stated by Chainalysis.

Over the last 24 years, this stolen sum accounts for approximately 61% of all globally digital assets that have been pilfered, making it the most significant theft ever documented. It’s been alleged that these illicit funds have found their way into North Korea’s weapon development projects, such as nuclear missiles, thereby escalating tensions on the Korean Peninsula and incurring global censure.

The South Korean administration highlighted the importance of taking action against these illegal activities as a means to limit North Korea’s military power.

Uncovering the Undercover Agents

Besides the designated individuals, one prominent figure, Kim Cheol-min, also operated covertly within American and Canadian corporations, earning a substantial sum in foreign currencies to finance his nation’s weapons projects.

The statement also pointed out that Kim Cheol-min transferred the profits to Pyongyang, as opposed to Kim Ryu-seong who was recently charged in the U.S. for breaching American sanctions on multiple occasions.

According to the statement, Kim Cheol-min accrued a substantial sum of foreign money by secretly working at American and Canadian businesses, then transferred it to Pyongyang. Meanwhile, Kim Ryu-seong was charged in an American court on December 11 for breaching U.S. sanctions over several years.

A Joint Effort to Prevent Future Crypto Theft

Recently, the government announced collaboration with global organizations to dismantle North Korea’s unlawful cyber operations. This week, the governments of South Korea and the United States have formed a strategic alliance to develop innovative tech solutions that aim to thwart cryptocurrency thefts associated with North Korea.

As per news sources, South Korea’s science ministry plans to support this initiative until 2026. The project involves collaboration between researchers from Korea University and RAND Corp., focusing on areas such as tracing stolen cryptocurrency, enhancing cybersecurity defenses, and investigating how criminals clean their ill-gotten gains using tools like ransomware.

Read More

2024-12-26 15:15