North Korea has reportedly detained a group of former state cyber operators and IT specialists who hacked two government-owned banks. The group targeted the internal networks of the Central Bank of North Korea and the Foreign Trade Bank. Stolen funds from both institutions were subsequently converted into cryptocurrency, then processed and laundered through China-based broker networks.
News of the arrests was first revealed in a report by Daily NK, a Seoul-based media outlet that relies on a network of sources inside North Korea. Citing an anonymous source in Pyongyang, security authorities have already executed the operation to apprehend the former cyber workers. Such reports remain difficult to independently verify due to strict restrictions on information entering and leaving the country.
When Cyber Weapons Turn Inward
If confirmed, the arrests would mark a rare incident where state-trained cyber operatives are accused of stealing funds from their own government rather than targeting foreign entities. Pyongyang authorities have long been accused of orchestrating state hacker groups to siphon digital assets from various overseas crypto firms.
Those international cyber operations were conducted to generate capital for the regime as a tactic to evade international sanctions. The fact that these IT workers have now breached their own financial institutions highlights a shift in targets, even as they relied on the familiar method of moving stolen funds through Chinese brokers to obscure crypto trails.
Seeking Opportunities Beyond State Orders
The report of arrests in Pyongyang adds to a string of incidents involving North Korean cyber workers in recent months. As additional context, it was also revealed that Consensys unknowingly outsourced developer work to North Korean nationals. These IT specialists continue to find ways to bypass recruitment processes to work on various global projects.
Having mastered the skills to breach banking systems and launder money through crypto, these operatives have begun acting outside state directives. Ultimately, the threat of asset loss for North Korean authorities does not always come from abroad - sometimes it originates from the very IT experts they trained.
Sourced from Cointelegraph.
Disclaimer: This article is for informational and educational purposes only, not financial advice. Cryptocurrency assets are highly volatile and carry significant risk. Always do your own research (DYOR) and never invest more than you can afford to lose.
