Why is North Korea stealing cryptocurrency?

north korea, Blockchain, Why is North Korea stealing cryptocurrency?

Credit: South China Morning Post

With North Korea crypto-hacking $2 billion, we ask a Brit who visited the country how they are capable of this and if Western perceptions of the nation are true

The West only sees what North Korea wants it to see. We view the country through a lens, shaped by our news reports, our satire and the country’s own propaganda. It looks like a military-driven, impoverished dictatorship but is touted by the government as a self-reliant, socialist state not to be messed with. The truth is perhaps not as black and white as either Korea’s own projections or our own perceptions.

This makes its relationship with technology a fascinating one. A country who seem more interested in nuclear weaponry than the power of deep learning, what is North Korea’s place at the table of tech? One would naturally assume that the country will spiral further into poverty as more extroverted, wealthy countries develop more impressive technology.

However, North Korea has been stealing cryptocurrency. The idea of the state exploiting cybersecurity in order to one-up their neighbours is a strange one; a nation routinely parodied for being backwards and unwilling to move with the times, ingeniously scamming their supposedly more advanced neighbours seems like a tactic the North Koreans just wouldn’t employ.

Several media outlets have reported that that North Korea has stolen as much as $2 billion, with “widespread and increasingly sophisticated” cyberattacks on cryptocurrency exchanges. The hackers attacked neighbours South Korea a reported ten times, India thrice and Bangladesh and Chile twice each.

The republic has been linked with a string of digital currency thefts over the years. It certainly doesn’t resonate with its image, even to those who have visited.

Is North Korea a secret technological hub?

“I didn’t spot anything which would give me any insight into [North Korea’s] technology,” says Tom Higgs. “Whilst they are making strides in warfare, nobody I saw carried a mobile phone or used state of the art computers in the university.”

Tom is from Oxfordshire in the UK. He visited the country in 2014 and now lives in Taiwan. “They’re beginning to develop hotel resorts for skiing and general R&R, but even Pyongyang is in dire need of upgrading,” he says. North Korea is not a centre for technological progress like its southern neighbour and there are no hints of it even for tourists or those who go to work in the country.

The cryptocurrency attacks were carried out by stealing not just from exchanges but users too. The attackers honed in on virtual currencies such as bitcoin, a departure from previous methods of targeting financial institutions. “Previously, hackers directly attacked exchanges,” Simon Choi, the founder of the cyber warfare research group IssueMakersLab, told South China Morning Post. “They targeted staff at the exchanges, but now they are attacking cryptocurrency users directly.”


North Korea has to appear to be a monolithic superpower intensely proud of their country to maintain that appearance.

Tom Higgs

In one attack, hackers accessed the infrastructure managing an unnamed nation’s entire ATM system, installing malware and modifying the way transactions were processed. South Korea’s cryptocurrency exchange, Bithumb, was targeted at least four times. Two attacks in 2017 resulted in losses of around $7 million each: two more in June 2018 and March 2019, claimed another $31 million and $20 million respectively.

North Korea only has two internet connections into the rest of the world. The state is estimated to have between 3,000 and 6,000 hackers trained in cyber operations according to a report by the Congressional Research Service. Promising mathematics, science and technology students in the country are believed to be fast-tracked to universities to learn about hacking, before moving overseas. How are they keeping this under wraps?

“It’s inevitable that some cracks appear in what they want to show you, like poverty visible near the railway into the country and frequent power cuts,” says Tom Higgs of his visit to North Korea.

Why is North Korea hacking other countries?

It’s estimated that nearly half of North Korea’s 25 million-strong population are malnourished. Sanctions on the country have limited its income and hacking is one way to bring in extra money.

It would be optimistic to imagine that Kim Jong-Un is stealing from the rich to feed the poor; the reality may be closer to the Western vision of the country’s obsession with weapons though. On his trip to North Korea, Tom found that the locals did not discuss the military openly with tourists.

“If you try to confront them about how many are in the army, famine or their nuclear arsenal, it will trigger unease in them and [they] will either deflect or say ‘I don’t know’,” he says. “The guards are human but they have to toe the party line and only speak positively of the country. They are reminded of the personality cult of the Kim family through badges and banners and political music played in public spaces, though how they truly feel inside is open to guesswork.”

north korea, Blockchain, Why is North Korea stealing cryptocurrency?
True glimpses into North Korea’s daily life are extremely rare. / Credit: Vox

A report to the U.N. Security Council North Korea sanctions committee claimed that the stolen money will be used to fund a new WMD (Weapons of Mass Destruction) program. Is a new era of destruction just around the corner? How does this affect the historic 2018–19 Korean peace process talks?

“A big concept in Asia is ‘face’, and admitting poverty and famine is a complete loss of that,” says Tom. “They [North Korea] have to appear to be a monolithic superpower intensely proud of their country to maintain that appearance. Telling lies to save face is acceptable in this way, so going back on [previous] deals to serve their own interests adds to that.”

Tom doesn’t believe however that the nation’s military poses much of a threat on the world stage.

“They [North Korean citizens] said they wouldn’t be afraid of striking out against America or the South, even if they don’t want a battle,” he says of his time in the country. “Obviously this is delusional because their weaponry is predominantly Soviet-era and frequently fails. The biggest problem wouldn’t be the bloodloss on both sides, but the influx of refugees into China and the south, and the sheer cost of upgrading what is crumbling, dated infrastructure.”

The future of North Korea seems to be constantly teetering on political uncertainty. The role that cryptocurrency is playing in the country’s finances is a fascinating juxtaposition of what the West knows of the nation’s culture; perhaps though, we just don’t know as much about North Korea as we thought we did.

north korea, Blockchain, Why is North Korea stealing cryptocurrency?

Mark White

Mark is a writer/editor who has written online and in print.

The vital role business plays in the business intelligence equation

Phillip Smith • 03rd December 2021

As organizations continue turning their attention to technology advancements, to maintain some form of ‘business as usual’, there has never been a greater need for companies to truly understand the data they hold, and how to interpret it. Phillip Smith, the chief architect at workplace data analytics firm Tiger, explains more.

2,500 years of threat intelligence and its value continues to...

Anthony Perridge • 01st December 2021

Anthony Perridge, VP International at ThreatQuotient discusses how threat intelligence has evolved to form an essential aspect of modern-day cybersecurity. By harking back to the practices of our ancestors, today’s threat hunters can take inspiration about evaluating threat data to maximize the best possible decisions.

The gaming industry’s latest challenge: DDoS protection

Babur Khan • 30th November 2021

As the industry faces a rise in DDoS threats, it is time that gaming companies truly prioritise cybersecurity and business resiliency. In his latest article, Babur Khan,Technical Marketing Engineer at A10 Networks, lays out a framework for the industry to do just this, securing their customers and their own success against the tide of cyberattacks.

The Best Ten Rated Cloud Security Management Options For Business

Erin Laurenson • 24th November 2021

Cloud Security programs that can carry out safety procedures and address or flag potential high-risk elements are now critical, allowing businesses to function normally without fearing a potential breach. To help you find the best Cloud management and security system for your business, we’ve done the research and found the top systems presently available on...