March 25, 2022
How to follow North Korean hackers
While the open and public nature of blockchain technology allows for more visibility into online transactions compared to traditional financial institutions, like banks, cryptocurrency exchanges often lack rigorous know-your-customer (KYC) and anti-money laundering protocols that are crucial in curbing cyber-enabled financial crime. North Korean hackers are a prime example of how bad actors can exploit these vulnerabilities to finance illicit activity, such as nuclear weapons development.
As outlined in a new report released by the Center for a New American Security (CNAS), Pyongyang continues to enjoy high overall success in infiltrating cryptocurrency exchanges in order to steal, launder, and liquidate funds for its nuclear weapons programs. The report also provides a snapshot of key policy oversights within the regulatory environment in the crypto space of central stakeholders and countries, such as China, the US, and South Korea, as well as a prospective look into the future of North Korea-led crypto hacks. How can the US strengthen its cyber resilience against these efforts?
The rate by which cryptocurrency and blockchain technology evolves continues to far outpace the rate by which national governments and international institutions are able to regulate and understand it. This is a major vulnerability that North Korean hackers continue to exploit.
The main impetus for this report was linked to common misconceptions surrounding the cyber threat emanating from Pyongyang. North Korea’s lack of access to modern computer hardware within its borders is not related to its ability to successfully execute cyberattacks, intrusions, and other unwanted cyber activity, because these often rely on software, not hardware — a tool that North Korean hackers have become very skilled at developing, trading, and using. While Beijing and Moscow captivate the attention of most democratic governments concerned about pending cyber intrusions, Pyongyang continues to defy miscalculated expectations by successfully employing myriad sophisticated cyberattacks that target new and developing financial technology. As such, North Korea will likely continue to adapt its cybercrime tactics targeting cryptocurrency to circumvent obstacles presented by economic sanctions on more traditional forms of financial activity and commerce.
Read the full article from Inkstick.
More from CNAS
-
Energy, Economics & Security / Technology & National Security
Recommendations for Promoting American AI AbroadStrategic Context and Program Objectives The American AI Exports Program is an ambitious and essential proposal to expand the reach of American AI technologies in foreign mar...
By Janet Egan, Geoffrey Gertz, Daniel Remler & Ruby Scanlon
-
Rational Security: The “Adverse Possession” Edition
This week, Scott sat down with Lawfare Managing Editor Tyler McBrien and Contributing Editor and CNAS adjunct senior fellow Alex Zerden to talk through a few of the week’s big...
By Alex Zerden
-
What if 'America First' Appears to Work? With Tom Wright
Tom Wright joins to talk about his recent article, “What if 'America First' Appears to Work?" about the Trump administration’s “might makes right” approach to foreign policy, ...
By Emily Kilcrease & Geoffrey Gertz
-
Economic Security in North America
Executive Summary The United States, Mexico, and Canada Agreement (USMCA) negotiated during President Donald Trump’s first term includes a novel review clause. By July 2026, t...
By Emily Kilcrease & Geoffrey Gertz
