North Korea’s cyberattacks netted $3 billion in cryptocurrency heists, UN report reveals

A recent report from South Korean news agency Yonhap, citing a study by the United Nations (UN) Security Council, has uncovered the extensive involvement of North Korea in cryptocurrency-related cybercrimes. The study from 2017 to 2023 reveals a staggering total of $3 billion in stolen funds attributed to North Korean-linked hacking activities.

UN investigated 17 crypto heists in 2023

The UN Security Council panel is currently probing 17 separate cryptocurrency heists that occurred in 2023, with suspicions pointing toward North Korean involvement. These incidents alone accounted for over $750 million in stolen funds, indicating the significant impact of North Korea’s cyber operations on the global financial landscape.

According to the UN report, there were 58 suspected cyberattacks targeting cryptocurrency-linked firms between 2017 and 2023. These attacks underscore North Korea’s persistent efforts to exploit vulnerabilities within the cryptocurrency sector as a means of evading international sanctions and generating revenue for its weapons programs.

The report further highlights that North Korea relies on cyberattacks to acquire approximately 50% of its foreign currency income. This illicit revenue stream directly fuels the country’s ongoing development of weapons, posing a significant challenge to international efforts to curb its nuclear ambitions.

North Korea: Branded as “World’s most prolific cyber-thief”

The UN report characterizes North Korea as “the world’s most prolific cyber-thief,” emphasizing the country’s systematic targeting of the cryptocurrency industry to advance its geopolitical objectives. By leveraging sophisticated hacking techniques, North Korea has siphoned billions of dollars from digital asset exchanges and other crypto-related entities.

In line with the UN findings, cybersecurity firm Recorded Future previously estimated that the Lazarus Group, a North Korea-linked hacker organization, was responsible for orchestrating cryptocurrency thefts totaling $3 billion over the past six years. This revelation further underscores the scope and scale of North Korea’s illicit activities in the cyber realm.

Addressing the growing threat

The escalating frequency and sophistication of North Korea’s cyber operations pose a significant challenge to the global financial system and underscore the urgent need for enhanced cybersecurity measures. As cryptocurrencies continue to gain prominence as a preferred medium of exchange, regulatory bodies, and industry stakeholders must collaborate to bolster defenses against malicious actors.

Efforts to combat cybercrime must encompass a multifaceted approach, including increased information sharing, enhanced regulatory oversight, and the development of robust cybersecurity frameworks. Moreover, diplomatic pressure and targeted sanctions may deter state-sponsored cyberattacks and hold perpetrators accountable for their actions.

The UN report’s findings shed light on the pervasive threat posed by North Korea’s cyber activities, particularly within the burgeoning cryptocurrency ecosystem. With billions of dollars at stake and geopolitical tensions on the rise, the need for concerted action to counter cyber threats has never been more pressing. 

By fostering collaboration among governments, industry stakeholders, and cybersecurity experts, the international community can work towards safeguarding the integrity of the global financial system and mitigating the risk posed by malicious actors.