North Korea Detains Hackers for Laundering Stolen Bank Funds via Cryptocurrency

North Korea Detains Hackers for Laundering Stolen Bank Funds via Cryptocurrency

North Korean authorities have arrested a group of former military hackers accused of stealing funds from two state banks and laundering the proceeds through cryptocurrency. According to a report by Daily NK, the group allegedly breached the systems of the Central Bank of the Democratic People’s Republic of Korea and the Foreign Trade Bank.

Details of the Allegations

The hackers reportedly diverted foreign currency and state trade funds, transferring the stolen money into overseas cryptocurrency wallets. The report claims that these funds were then converted to cash by Chinese brokers, who changed the assets into U.S. dollars and yuan.

Methods of Evasion

To avoid detection, the hackers purportedly split their transactions into smaller amounts and employed encrypted messaging apps while using unregistered phones and Chinese wireless equipment for communications. Contact sources in border cities such as Sinuiju and Hyesan facilitated real-time exchanges of cryptocurrency for cash.

Investigation and Arrest

The arrests occurred on July 12 at a safe house in Pyongyang, as officials from North Korea’s National Intelligence Agency detected discrepancies in foreign-currency payment approvals and suspicious activities linked to overseas IP addresses.

Wider Implications

This incident reflects a broader trend, as a multinational sanctions-monitoring report has highlighted that Chinese over-the-counter traders and financial institutions play a pivotal role in converting cryptocurrency stolen by North Korean-linked operators into fiat currency. Notably, North Korean hackers reportedly stole a record $2 billion in cryptocurrency last year, according to Chainalysis.