Police Confirm North Korean Connection in Bitcoin Exchange Phishing

Law enforcement officials have confirmed that hackers from North Korea sought to steal bitcoins from exchanges in South Korea.

AccessTimeIconOct 2, 2017 at 9:00 a.m. UTC
Updated Sep 13, 2021 at 6:59 a.m. UTC
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global hub for everything crypto, blockchain and Web3.Register Now

Law enforcement officials have confirmed that hackers from North Korea sought to steal bitcoins from exchanges in South Korea.

In a report released last week, the Republic of Korea's National Police Agency (NPA) said the incidents – which were said to be ultimately unsuccessful – did occur. It further detailed that 25 employees at four different exchanges were targeted in 10 separate "spear phishing" attempts since July.

Spear phishing is when a would-be hacker pretends to be someone else in order to trick the victim into providing login or other details.

The confirmation comes several weeks after cybersecurity firm FireEye published a report on the attacks.

AFP, citing regional news source Yonhap, reported that those behind the attacks pretended to be security specialists and sent emails with malware included as attachments. The police report further indicated that the hacking attempts also targeted smartphones, suggesting that they may have been attempting to compromise devices used for two-factor authentication.

Perhaps most notably, the NPA indicated that none of the investigated attempts resulted in either the loss of funds or an actual security breach, according to AFP. No exchanges were identified in the report.

The Permanent Mission to the United Nations of the Democratic People's Republic of Korea did not respond to a request for comment.

North Korean soldiers image via Astrelok/Shutterstock

Disclosure

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by Block.one; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.


Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.