FireEye revealed that groups that appear to be sponsored by North Korea have targeted South Korean cryptocurrency exchanges and service providers. At least three attacks on these orgs have been conducted since May, the security company said, and more could be planned for the future. Those fears pale in comparison to North Korea testing nuclear weapons, but cryptocurrency owners should probably still be concerned.
It's no surprise that someone has been trying to steal cryptocurrency. Bitcoin, Ethereum, and other "coins" have all surged in popularity in recent months, at least for short periods of time. That rise prompted many people to buy graphics cards so they can mine their own cryptocurrency, which has in turn created a shortage of GPUs that makes it next to impossible for gamers to find low-end or mid-tier cards at reasonable prices.
North Korea doesn't seem interested in mining, but that doesn't mean the country's leadership wants to ignore the money it can make by acquiring and selling cryptocurrency. According to FireEye, it would rather steal those funds, as evidenced by the company's timeline of attacks:
April 22 – Four wallets on Yapizon, a South Korean cryptocurrency exchange, are compromised. (It is worth noting that at least some of the tactics, techniques, and procedures were reportedly employed during this compromise were different than those we have observed in following intrusion attempts and as of yet there are no clear indications of North Korean involvement).April 26 – The United States announces a strategy of increased economic sanctions against North Korea. Sanctions from the international community could be driving North Korean interest in cryptocurrency, as discussed earlier.Early May – Spearphishing against South Korean Exchange #1 begins.Late May – South Korean Exchange #2 compromised via spearphish.Early June – More suspected North Korean activity targeting unknown victims, believed to be cryptocurrency service providers in South Korea.Early July – South Korean Exchange #3 targeted via spear phishing to personal account.
FireEye didn't mince words in its report. The company said North Korea is a "pariah nation" that "operates in many ways like a criminal enterprise" and has been forced to find new ways to make money by various economic sanctions. The relative lack of regulation and lax security of some cryptocurrency service providers makes them a prime target for a "Hermit Nation" looking to make a quick buck.
Cryptocurrency might also be easy for the attackers to launder into more established currencies. The whole purpose of these exchanges is to convert a cryptocurrency into something like U.S. dollars or South Korean won. Unless those companies are honest and diligent, it probably wouldn't be particularly hard for someone to sell off their ill-gotten cryptocurrency with no one being the wiser.
Stay on the Cutting Edge
Join the experts who read Tom's Hardware for the inside track on enthusiast PC tech news — and have for over 25 years. We'll send breaking news and in-depth reviews of CPUs, GPUs, AI, maker hardware and more straight to your inbox.
Nathaniel Mott is a freelance news and features writer for Tom's Hardware US, covering breaking news, security, and the silliest aspects of the tech industry.
I can just see the N. Korea's slogan now:Reply
"Cryptocurrency: funding all our nuclear needs"
Hopefully this issue gets tackled soon.
DPRK has long been a source of high-quality counterfeit bills. I think this is just a sign of them trying to not to be left behind, as the world transitions away from paper currency.Reply
Unfortunately, cryptocurrencies are resilient against counterfeiting, meaning they have to resort to tactics akin to that of a high-tech pickpocket or con artist. Since mining is highly energy-intensive and requires good connectivity, it would be a bad move for them.
Even without ICBMs and H-bombs, the only way anyone can do anything about North Korea is to make it more painful and costly for China to keep coddling them. Their conventional weapons deterrent is already quite effective. For decades, they've had the capability to flatten Seoul, without using a single nuke. That's already a price no one wants to pay.
So, besides sanctions (which only seem to make them mad), the only things you can do are to use cyberwarfare and go after China. Cyber is tricky, because by virtue of being so far behind the rest of the world, they have the tactical advantage of a very small attack surface. China is tricky because if you're not careful, they'll hurt you worse.
Yes, a military that puts 80% of it's resources and personnel parading along the same spot twice per year to appease the child-like fascinations of their man-child leader would just be SO hard to take out.Reply
20170742 said:Yes, a military that puts 80% of it's resources and personnel parading along the same spot twice per year to appease the child-like fascinations of their man-child leader would just be SO hard to take out.
Taking him out isn't the hard part. It's the global backlash that would come from it that's the hard part. Unless Kim actually does attack something, the US invading would look seriously bad in the eyes of the world. The other bad thing is if NK is nuke capable, even a successful invasion on them will be retaliated by a possibly innocent area getting nuked in spite.
That possessive apostrophe in the article title is misleading...Reply
Bloodroses hit the nail on the head. Getting rid of Kim Jong Un would not be the hard part. The hard part would be keeping various military officials from launching North Korea's nukes as an "F' you!" to the global community expecting that the global community would try to arrest them and charge them for working for Un.Reply
Time to send the N Korean President are A+ gift of love boooomReply
Everybody in N Korea is thin. Big Guy needs a special or 2 dropped on him now. BooomReply