In a landmark development, South Korean officials have confirmed that North Korean cybercriminals orchestrated a significant Ethereum theft in 2019. This revelation marks a crucial advancement in the ongoing investigation into the cyber heist.
The pilfered digital currency, estimated to be worth 58 billion won (around $55.7 million) at the time, was traced back to North Korea’s Reconnaissance General Bureau, a military intelligence agency. The hackers successfully breached a South Korean cryptocurrency exchange to carry out this elaborate theft.
Unveiling the Details of the Hack and Collaborative Investigative Efforts
The National Police Agency disclosed that the cyber attackers managed to steal an astounding 342,000 Ethereum tokens. The current value of these tokens exceeds 1.4 trillion won (approximately $1.05 billion), making it one of the most significant crypto thefts in history.
Although the specific exchange targeted was not publicly named, Upbit—one of South Korea’s largest exchanges—had previously reported a similar Ethereum loss to an unidentified wallet back in 2019.
The hackers laundered more than half of the stolen Ethereum through three self-operated cryptocurrency exchanges, offering discounts to convert the digital assets into Bitcoin. The remaining tokens were distributed across 51 other exchanges worldwide.
The investigation was a collaborative effort between South Korean authorities and the United States Federal Bureau of Investigation (FBI). Using sophisticated techniques, they tracked Internet Protocol (IP) addresses and followed the movement of the pilfered assets.
This incident represents the first occasion South Korea has conclusively connected a crypto exchange cyberattack to North Korea. Local media reports have linked the operation to the infamous Lazarus and Andariel hacker groups, both associated with North Korea’s Reconnaissance General Bureau.
The Persistent Threat of Cyber Attacks in the Crypto Industry
Historically, North Korean hackers have been implicated in numerous significant cyber incidents. Over recent years, these groups have become notorious for targeting cryptocurrency exchanges and financial platforms to financially support their nation’s operations.
While authorities continue to strive for the recovery of stolen assets from these infamous cybercriminals, the threat they pose to the cryptocurrency industry remains significant. The United Nations has recently highlighted North Korea’s involvement in multiple cyberattacks on cryptocurrency platforms.
According to a UN panel report published in May, the North Korean regime is suspected of orchestrating approximately 97 crypto hacks between 2017 and 2024, with a cumulative value of $3.6 billion. These activities are believed to significantly contribute to funding North Korea’s missile and nuclear programs, underscoring the wider geopolitical impact of these crimes.
Despite coordinated efforts by authorities and platforms to mitigate these cyber threats, the hackers have proven to be highly resilient. Just last month, the same group managed to steal approximately $3 billion worth of cryptocurrency from unsuspecting users by orchestrating a fraudulent blockchain game.
Reports indicate that this extensive theft operation was conducted by North Korean hackers over a span of six years, from 2016 to 2022.
Conclusion
The activities of North Korean hackers continue to pose a significant challenge to global cybersecurity, especially within the cryptocurrency sector. While advancements have been made in identifying and tracking these threats, ongoing vigilance and international cooperation remain essential to combat this persistent threat effectively.
“`
