- North Korean hackers stole $1.34 billion in cryptocurrency in 2024, marking a 102% increase from the previous year.
- Sanctions targeted 15 North Korean IT agents accused of funding Pyongyang’s nuclear missile program through cyber exploits.
- Larger cyber heists grew in 2024, with attacks exceeding $50 million becoming more frequent and sophisticated.
Governments worldwide are intensifying efforts to combat North Korean hacking groups. They are accused of stealing over $1.3 billion in cryptocurrency in 2024. The Lazarus Group, known for major exploits like the $600 million Ronin Network hack, remains at the center of these accusations.
Global Crackdown on North Korean Cyber Criminals Intensifies
South Korea recently imposed sanctions on 15 North Korean IT agents and one organization. They are allegedly involved in raising funds for Pyongyang’s nuclear missile program. The country’s Ministry of Foreign Affairs reported that these individuals procured funds through overseas employment under false identities.
One sanctioned individual, Kim Cheol-min, allegedly earned substantial foreign currency. He worked undercover for U.S. and Canadian companies. Another operative, Kim Ryu Song, generated over $88 million in revenue through money laundering and identity fraud over six years. These sanctions come amidst a rising trend of high-value cyber heists linked to North Korean operatives.
Crypto Theft Reaches Alarming Levels
North Korea’s hackers targeted crypto platforms and blockchain firms in 47 attacks in 2024, with the haul coming in over $1.34bn. This is a sharp rise of 102% as compared to $660 million that was stolen in 2023. The stolen amount accounted for over 61% of the total global crypto theft value in 2024. This highlights the outsized role of North Korean actors in these crimes. Moreover, larger heists became more frequent in 2024. Attacks valued between $50 and $100 million, and those exceeding $100 million, increased significantly compared to previous years.
Data reveals that North Korean hackers have enhanced their methodologies. This enables them to carry out more profitable exploits. Chainalysis noted a decrease in smaller-scale attacks under $50 million. These hackers are now focusing on fewer but more lucrative targets.
Despite a drop in the overall number of attacks, their financial impact has grown substantially. Experts warn that North Korean agents are adapting quickly. They are becoming more efficient at exploiting vulnerabilities in decentralized finance platforms and exchanges.
Global Security Measures Struggle to Keep Up
As the scale of North Korean exploits grows, governments are racing to tighten security frameworks and enforce stricter sanctions. However, the rapid evolution of hacking techniques presents significant challenges. Cybersecurity firms are urging tighter cooperation between international regulators and digital asset platforms to close security loopholes.
Customs security specialists expect North Korean threat actors to remain active in 2025 while further improving their tactics. Governments and blockchain platforms are aware of threats that continue to evolve in complexity and intensity.
