February 22, 2022
Understanding the Strengths and Vulnerabilities of North Korean Hackers
The international community often incorrectly correlates North Korea’s lack of access to modern computer hardware within its borders to inferior offensive cyber capabilities. As demonstrated in a new report released by the Center for a New American Security (CNAS), North Korea has rapidly expanded its illicit activity within the cyber domain under sustained economic pressure from decades of sanctions. As such, Pyongyang will likely continue to adapt its cybercrime operations to evade the full brunt of economic sanctions as innovation within the crypto space, such as cryptocurrency, continues to outpace current regulation of financial technology The report also outlined major flaws in North Korean cyber operations, as well as areas where the United States and its allies can expand coordination to counter North Korea-led cyber-enabled financial crime.
Pyongyang continues to defy miscalculated expectations regarding its cyber capabilities by successfully employing a series of sophisticated cyberattacks that target new and developing financial technology.
In partnership with data provided by leading blockchain analysis firm TRM Labs, CNAS provides in-depth analysis of Pyongyang’s demonstrated ability to exploit cryptocurrencies by investigating three separate case studies of North Korean hacks targeting cryptocurrency exchanges. Through analyzing these hacks, the report outlined key strengths and vulnerabilities in North Korea’s ability to steal, launder, and liquidate funds. A major takeaway from the study was that North Korean hackers demonstrated only moderate concern over eventual attribution of their crimes, meaning that the process of laundering stolen funds was not executed as seamlessly as the initial hack. This signals that Pyongyang is aware of the lack of legal retribution for its illicit cyber activities, thus preferring speed over total obfuscation. For example, only one North Korean national has ever been extradited to the United States to face money laundering charges, and this was an extraordinarily rare case. Additionally, North Korean hackers have demonstrated steady improvements in the complexity of their hacks and laundering operations, including the use of cryptocurrency mixers and over-the-counter brokers to hide the origin of the stolen crypto and the initial hack.
Read the full article from The Diplomat.
More from CNAS
-
Economic Security in Asia Part 1: China's growing pains with Dan Rosen
Podcast
Dan Rosen, leading expert on China's economy and head of the Rhodium Group's China practice, joins Emily and Geoff to talk about the recently concluded third plenum meetings i...
By Emily Kilcrease & Geoffrey Gertz
-
What a Bunch of Malarkey!
Podcast
Emily and Geoff discuss the U.S. presidential election and what that might mean for economic security policy. They get into trade policy, what both candidates would do to comp...
By Emily Kilcrease & Geoffrey Gertz
-
How U.S.-China Competition Upended the International Economic Order and What the United States Can Do to Fix It
Podcast
On June 26, CNAS hosted an event to discuss a new report, Disorderly Conduct: How U.S.-China Competition Upended the International Economic Order and What the United States Ca...
By Emily Kilcrease, Geoffrey Gertz, Adam Tong & Peter Harrell
-
Sanctions by the Numbers: 2023 Year in Review
Reports
Executive Summary In 2023, the Biden administration continued to prioritize sanctions as a key tool to support U.S. national security and foreign policy objectives. The United...
By Rowan Scarpino & Jocelyn Trainer
