On July 12, North Korean authorities arrested a group of highly skilled hackers suspected of stealing from the country's own banks and laundering the stolen assets through cryptocurrencies. The crackdown followed an internal investigation that traced suspicious crypto transactions back to a safe house in Pyongyang.
Inside the Operation
The hackers reportedly targeted the internal networks of the Chosun Central Bank and the Foreign Trade Bank, both key financial institutions in North Korea. The group is said to have consisted of former members of a cyber warfare unit under the Reconnaissance and Intelligence General Bureau. These individuals recruited promising graduates from top technical universities like Kim Chaek University of Technology and Pyongyang University of Science.
Using military-grade cyber skills, encrypted communications, and Chinese wireless hardware, the group managed to breach the banks' systems and convert stolen funds into cryptocurrency. Brokers based in China then converted these cryptocurrencies into cash, which was funneled back into North Korea through contacts near the border, completing the laundering process.
Broader Context of North Korea's Crypto Crimes
North Korea has long been known for its aggressive cyber theft campaigns targeting digital assets worldwide. International bodies including the United Nations and governments such as the United States, South Korea, and Japan have accused Pyongyang’s cyber units, notably the Lazarus Group, of stealing billions of dollars in cryptocurrency.
Some of the largest crypto heists linked to North Korean hackers include attacks on the Ronin Bridge, Harmony Horizon Bridge, Atomic Wallet, and several crypto exchanges like CoinEx and WazirX. Despite these accusations, Pyongyang denies involvement, dismissing the claims as politically motivated.
This latest incident stands out because the perpetrators allegedly stole from their own state’s financial institutions, revealing cracks within the regime’s cyber operations. It also highlights the increasing role of crypto in North Korea’s financial activities amid international sanctions.
