US charges three North Korean hackers over crypto attacks and WannaCry ransomware

Published at: Feb. 17, 2021

On Wednesday, the United States Department of Justice announced charges against three North Korean hacker. 

Making the announcement, Assistant Attorney General John Demers condemned the North Korean program, the most famous branch of which is Lazarus Group. Demers said:

"North Korea’s operatives, using keyboards rather than guns, stealing digital wallets of cryptocurrency instead of sacks of cash, are the world’s leading bank robbers."

With a country largely sequestered from the international economy, North Korea's hacking program has been a critical source of revenue. Many have linked hacking income from sources like the WannaCry malware and crypto exchange Coincheck with the nuclear weapons program. Demers elaborated:

"The DPRK cyber threat has followed the money and turned its revenue generation sights on the most cutting edge aspects of international finance, including through the theft of cryptocurrency from exchanges and other financial institutions."

North Korea's hacking program has been the subject of extensive scrutiny, both from the U.S. and internationally. As the country has no widespread internet access, many cite China's role in training North Korean hackers. Indeed, the U.S. sanctioned two Chinese affiliates of Lazarus Group back in March 2020. 

Tags
Related Posts
US authorities go after 280 crypto accounts allegedly tied to North Korea
"The Justice Department today filed a civil forfeiture complaint detailing two hacks of virtual currency exchanges by North Korean actors," said an Aug. 27 statement from the U.S. Department of Justice, or DoJ. "These actors stole millions of dollars’ worth of cryptocurrency and ultimately laundered the funds through Chinese over-the-counter (OTC) cryptocurrency traders." The hackers allegedly utilized 280 different digital asset accounts. March 2020 saw details of a 2019 legal case surface, in which two Chinese nationals allegedly hijacked piles of crypto assets totaling $250 million. This ordeal appears to be connected with the present day news, the DoJ statement …
Blockchain / Aug. 27, 2020
Digital intelligence must overcome challenges to solving crypto crimes
While the value of cryptocurrencies has varied wildly in the last year, this has not diminished crypto’s attractiveness to criminals. Many of them are moving their illegal activities underground and outside the view of law enforcement. Because of the public nature of most blockchains, however, this rapid movement shouldn’t be a major concern to law enforcement agencies. With the right tools and training, following the proceeds of crypto-enabled crime is actually not as difficult as it may seem. However, intelligence agencies must have a cryptocurrency investigation plan that includes the right tools to lawfully collect digital evidence and the properly …
Technology / Aug. 20, 2021
US warns of resurgence of North Korea’s BeagleBoyz hacking gang
A group of North Korean hackers is engaged in a massive campaign targeting U.S. financial institutions and cryptocurrency exchanges around the world — with U.S. authorities warning of the high level of threat it poses to the country. According to an alert issued by the U.S. Department of Homeland Security (DHS), agencies including the FBI, the U.S. Cyber Command, and the Department of the Treasury are moinotiring the resurgence of the North Korea-sponsored hacking group, BeagleBoyz. The hackers have not been as active in the last few years as the notorious Lazarus Group – another hacking group from the hermit …
Technology / Aug. 28, 2020
US Government Sanctions Two Chinese Nationals in Connection With Lazarus Group Hack
The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) sanctioned two Chinese nationals accused of laundering cryptocurrency that was stolen in a 2018 crypto exchange hack. At the same time, the Department of Justice announced an indictment for money laundering against the same two individuals. Their activity is linked to Lazarus Group, a hacking group allegedly connected to the North Korean government. OFAC accuses Yinyin Tian and Juiadong Li of assisting “a malicious cyber-enabled activity.” Secretary Steven Mnuchin gave the following statement: “The North Korean regime has continued its widespread campaign of extensive cyber-attacks on financial institutions …
Regulation / March 2, 2020
Infamous North Korean hacker group identified as suspect for $100M Harmony attack
The Lazarus Group, a well-known North Korean hacking syndicate, has been identified as the primary suspect in the recent attack that saw $100 million stolen from the Harmony protocol. According to a new report published Thursday by blockchain analysis firm Elliptic, the manner in which Harmony’s Horizon bridge was hacked and the way in which the stolen digital assets were consequently laundered bears a striking resemblance to other Lazarus Group attacks. “There are strong indications that North Korea’s Lazarus Group may be responsible for this theft, based on the nature of the hack and the subsequent laundering of the stolen …
Blockchain / June 30, 2022