Police Confirm North Korean Connection in Bitcoin Exchange Phishing

Law enforcement officials have confirmed that hackers from North Korea sought to steal bitcoins from exchanges in South Korea.

AccessTimeIconOct 2, 2017 at 9:00 a.m. UTC
Updated Aug 18, 2021 at 7:03 p.m. UTC

Presented By Icon

Election 2024 coverage presented by

Stand with crypto

Law enforcement officials have confirmed that hackers from North Korea sought to steal bitcoins from exchanges in South Korea.

In a report released last week, the Republic of Korea's National Police Agency (NPA) said the incidents – which were said to be ultimately unsuccessful – did occur. It further detailed that 25 employees at four different exchanges were targeted in 10 separate "spear phishing" attempts since July.

  • Bitcoin Mining in the U.S. Will Become 'a Lot More Decentralized': Core Scientific CEO
    13:18
    Bitcoin Mining in the U.S. Will Become 'a Lot More Decentralized': Core Scientific CEO
  • Binance to Discontinue Its Nigerian Naira Services After Government Scrutiny
    05:10
    Binance to Discontinue Its Nigerian Naira Services After Government Scrutiny
  • The first video of the year 2024
    04:07
    The first video of the year 2024
  • The last regression video of the year 3.67.0
    40:07
    The last regression video of the year 3.67.0
  • Spear phishing is when a would-be hacker pretends to be someone else in order to trick the victim into providing login or other details.

    The confirmation comes several weeks after cybersecurity firm FireEye published a report on the attacks.

    AFP, citing regional news source Yonhap, reported that those behind the attacks pretended to be security specialists and sent emails with malware included as attachments. The police report further indicated that the hacking attempts also targeted smartphones, suggesting that they may have been attempting to compromise devices used for two-factor authentication.

    Perhaps most notably, the NPA indicated that none of the investigated attempts resulted in either the loss of funds or an actual security breach, according to AFP. No exchanges were identified in the report.

    The Permanent Mission to the United Nations of the Democratic People's Republic of Korea did not respond to a request for comment.

    North Korean soldiers image via Astrelok/Shutterstock

    Disclosure

    Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

    CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by Block.one; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.


    Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.