A series of hacking and data-breach incidents in South Korea's financial sector is intensifying concern about cyber threats tied to North Korea. Analysts say Pyongyang has made cybercrime a major source of foreign currency, with cryptocurrency theft playing a central role.

New figures from blockchain analytics firm Chainalysis indicate that North Korea-linked hacking groups stole $2.02 billion in cryptocurrency last year, a 51% increase from the previous year and the highest annual total recorded so far. That pushed the cumulative amount attributed to those groups to $6.75 billion.

Record losses tied to North Korean groups

Chainalysis said on Oct. 29 that the $2.02 billion stolen last year marked a new high for cryptocurrency theft linked to North Korea. The scale of the increase underscores how important digital-asset hacks have become to the country's illicit revenue generation, according to the source report.

The broader pattern has not eased this year. TRM Labs estimated that attacks connected to North Korea accounted for about 66% of global losses from cryptocurrency hacks in the first half, suggesting that the same threat remains a dominant force across the sector.

Bybit attack highlighted the scope of the threat

One of the clearest examples cited was the hack of global cryptocurrency exchange Bybit, where roughly $1.5 billion was stolen in February last year. The FBI formally attributed that attack to a North Korean hacking group.

Investigators believe the stolen assets were moved through multiple wallets in an apparent effort to make tracking more difficult. The case has been widely viewed as a sign of both the scale and sophistication of the operations linked to Pyongyang.

US intelligence ties stolen funds to weapons programs

US intelligence agencies have assessed that the proceeds from these crimes help finance North Korea's nuclear and missile development. In a report released in March, the Office of the Director of National Intelligence said North Korea obtains at least $1 billion a year through financial crimes, including cryptocurrency theft, and uses that money for weapons development.

Director of National Intelligence Tulsi Gabbard also told a Senate Intelligence Committee hearing that about $2 billion stolen by North Korea last year was being used to sustain the regime and advance strategic weapons programs. Those statements reinforce long-standing concerns that cyber theft is not only a criminal issue but also a security challenge.

South Korea and Washington step up scrutiny

South Korea has direct experience with this threat. The National Office of Investigation, which operates under the Korean National Police Agency, previously concluded that the 2019 theft of Ethereum worth about $41.9 million from the South Korean exchange Upbit was carried out by Lazarus and Andariel, both hacking groups under North Korea's Reconnaissance General Bureau.

At the same time, the US government is increasing pressure on another revenue channel used by Pyongyang. The Treasury Department's Office of Foreign Assets Control imposed additional sanctions on 10 individuals and one entity accused of disguising North Korean information technology workers for overseas jobs and sending illicit earnings back to the country.

With fresh hack estimates, past attacks on South Korean platforms, and new US sanctions now on the record, the next confirmed development is likely to come from further enforcement actions or updated threat assessments from investigators and intelligence agencies.

Source: en.bloomingbit.io