North Korea and BitcoinsteemCreated with Sketch.

in #kr7 years ago

170912080913-north-korea-bitcoin-780x439.jpg

North Korea appears to be stepping up efforts to secure bitcoin and other cryptocurrencies, which could be used to avoid trade restrictions, a new report from security researcher FireEye Inc. states.

Hackers from Kim Jong Un’s regime are increasing their attacks on cryptocurrency exchanges in South Korea and related sites, in the face of new sanctions approved by the United Nations Security Council. They also breached an English-language bitcoin news website and collected bitcoin ransom payments from global victims of the malware WannaCry, according to the researcher.
maxresdefault.jpg
Kim’s apparent interest in cryptocurrencies comes amid rising prices and popularity. The same factors that have driven their success — lack of state control and secretiveness — would make them useful fund raising and money laundering tools for a man threatening to use nuclear weapons against the U.S. With tightening sanctions and usage of cryptocurrencies broadening, security experts say North Korea’s embrace of digital cash will only increase.

“We definitely see sanctions being a big lever driving this sort of activity,” said Luke McNamara, a researcher at FireEye and author of the new report. “They probably see it as a very low-cost solution to bring in hard cash.”

The 15-member Security Council on Monday approved sanctions aimed at punishing North Korea for its latest missile and nuclear tests. U.S. officials said the new measures would cut the country’s textile exports by 90 percent, restricting its ability to get hard currency.

So far this year, FireEye has confirmed attacks on at least three South Korean exchanges, including one in May that was successful. Around the same time, local media reported that Seoul-based exchange Yapizon lost more than 3,800 bitcoins (worth about $15 million at current rates) due to theft, although FireEye said there are not clear indications of North Korean involvement.
597b1fe80cf7a.png
North Korea’s telecommunications ministry didn’t respond to an emailed request for comments. The country’s diplomats and official media have denied the country played any role in cyberattacks, including the hacking of Sony Pictures Entertainment in 2014.

North Korea operates what South Korea believes is an army of hackers expanding its focus from military espionage to financial theft. The regime’s Reconnaissance General Bureau, which directly reports to Kim Jong Un, handles peacetime cyberoperations from espionage to network disruptions and employs an estimated 6,000 officers, according to a 2016 report from the International Cyber Policy Centre at the Australian Strategic Policy Institute.

In the recent round of attacks, South Korea may have become a target not just due to its proximity to Pyongyang and shared language, but because the country has become one of the busiest trading hubs for cryptocurrencies this year. Seoul-based Bithumb is the world’s biggest exchange for ethereum. In June, it said hackers had stolen customer information from an employee’s computer, without identifying the attackers.
North-Korean-Hackers-Stole-88000-Worth-of-Bitcoin-Each-Month-from-2013-2015.png
“As more money goes into cryptocurrency exchanges and more people buy bitcoin and ethereum, exchanges become larger targets for this group,” said McNamara. He said so far he did not have evidence that the Kim regime has targeted cryptocurrency exchanges outside of South Korea, but did not rule out the possibility in the future.

Besides exchanges, FireEye said an English-language bitcoin news website was breached by North Korea, which would likely allow hackers to identify people visiting the site. It declined to name the website and said it believes North Korea prefers larger targets like exchanges than individual owners of cryptocurrencies.

The firm said previously it had found a connection between Pyongyang and the WannaCry attack from May and June, which affected more than 300,000 computers worldwide. McNamara said he also sees indications North Korean hackers are getting involved in cryptocurrency mining.
North Korean Hacker Reportedly Coming After Bitcoins To Finance Kim Jong Un Regime   Google Search.jpgNorth Korean Hacker Reportedly Coming After Bitcoins To Finance Kim Jong Un Regime.jpg
Attacks on the South Korean exchanges were carried out through so-called spear-phishing attacks, or emailing files laced with malware to specific targets. FireEye identified the malware, known as PEACHPIT, and provided examples of documents it was attached to, including one published by Seoul-based Hyundai Research Institute about the state of bitcoin industries. When contacted, the author of the report confirmed he wrote it in 2014, but was unaware that someone was distributing a press release about it this year.

The group behind the hacks, which FireEye identified as TEMP.Hermit, has made a name for itself out of bitcoin theft, including a 2015 attack on South Korea’s nuclear industry. The hackers have also been tied by other security firms to last year’s attack on Samsung Electronics Co.’s corporate messenger app and, most prominently, the breach of Sony Corp.’s film studio, which the FBI blamed on North Korea.

“They’re pretty capable actors in comparison to other North Korean activity we see,” said McNamara. “They’ve been creative in how they use their cyberespionage capability.”

bitcoin-north-korea.jpg

FireEye said if the hackers wanted to convert bitcoin or ethereum into dollars or won, they’d likely first exchange them into harder-to-trace cryptocurrencies like Monero and then into fiat currency. A similar technique was used last month to empty the bitcoin wallets related to WannaCry.

“They could compromise an exchange and transfer those bitcoins to other exchanges elsewhere in Asia or exchange them for a more anonymous cryptocurrency,” said McNamara. “There are variety of things they could do to cash out.”

Sort:  

Woff, woff!

Hello @japangaijin, Nice to meet you!

I'm a guide dog living in KR community. I can see that you want to contribute to KR community and communicate with other Korean Steemians. I really appreciate it and I'd be more than happy to help.

KR tag is used mainly by Koreans, but we give warm welcome to anyone who wish to use it. I'm here to give you some advice so that your post can be viewed by many more Koreans. I'm a guide dog after all and that's what I do!

Tips:

  • If you're not comfortable to write in Korean, I highly recommend you write your post in English rather than using Google Translate.
    Unfortunately, Google Translate is terrible at translating English into Korean. You may think you wrote in perfect Korean, but what KR Steemians read is gibberish. Sorry, even Koreans can't understand your post written in Google-Translated Korean.
  • So, here's what might happen afterward. Your Google-Translated post might be mistaken as a spam so that whales could downvote your post. Yikes! I hope that wouldn't happen to you.
  • If your post is not relevant to Korea, not even vaguely, but you still use KR tag, Whales could think it as a spam and downvote your post. Double yikes!
  • If your post is somebody else's work(that is, plagiarism), then you'll definitely get downvotes.
  • If you keep abusing tags, you may be considered as a spammer. It may result to put you into the blacklist. Oops!

I sincerely hope that you enjoy Steemit without getting downvotes. Because Steemit is a wonderful place. See? Korean Steemians are kind enough to raise a guide dog(that's me) to help you!

Woff, woff! 🐶

kr-guide!

Congratulations @japangaijin! You have completed some achievement on Steemit and have been rewarded with new badge(s) :

You made your First Vote
Award for the number of upvotes received

Click on any badge to view your own Board of Honor on SteemitBoard.
For more information about SteemitBoard, click here

If you no longer want to receive notifications, reply to this comment with the word STOP

By upvoting this notification, you can help all Steemit users. Learn how here!

Coin Marketplace

STEEM 0.25
TRX 0.25
JST 0.040
BTC 94487.77
ETH 3419.70
USDT 1.00
SBD 3.51