Blockchain analysis firm Chainalysis details that out of $2.2 billion worth of cryptocurrency, at least $1.34 billion was stolen in 2024 by state-sponsored North Korean hackers.

This represents a significant increase from the $660.5 million they stole in 2023, a rise of over 100%. Hackers affiliated with North Korea are estimated to be responsible for 61% of all global cryptocurrency thefts, showcasing their dominance in the digital crime space.

https://usaherald.com/blake-lively-accuses-justin-baldoni-of-sexual-harassment-and-coordinated-smear-campaign/

Organized Cybercrime: North Korean Hackers

The U.S. Federal Bureau of Investigation (FBI) has identified the Lazarus Group as a key player in many of these heists.

However, several other North Korean hacking units are actively involved, including TraderTraitor, suspected of orchestrating the May cyberattack on Japan's DMM Bitcoin exchange.

These hacker groups are notorious for employing advanced malware and social engineering tactics to carry out cryptocurrency theft.

 Their operations are highly organized and state-sponsored, with stolen crypto being funneled to fund North Korea’s weapons of mass destruction and ballistic missile programs, enabling the regime to circumvent international sanctions.

The DMM Bitcoin Attack: A Case Study

In one of the most significant incidents of 2024, a North Korean cyberattack group stole over $300 million worth of cryptocurrency from Japan’s DMM Bitcoin exchange.

This attack marked the first major breach of Japan’s crypto market and sent shockwaves through the global digital finance sector.

The breach was first reported in May, and by early December, DMM Bitcoin announced its liquidation due to the substantial losses. Customer assets will be transferred to SBI VC Trade Co., a Japanese exchange, by March 2025.

This incident underscores the growing vulnerability of crypto platforms to state-sponsored cyberattacks.

Tactics of North Korean Hackers

North Korean hacker groups have demonstrated exceptional expertise in exploiting vulnerabilities in digital systems and targeting cryptocurrency exchanges.

These groups are known for their ability to bypass sophisticated security measures to access crypto assets.

One of their key strategies involves targeting software engineers with expertise in cryptocurrency.

 By posing as job recruiters on social media, they lure engineers with offers such as “I want to learn programming from you” or “I need help fixing a bug.” Once engagement occurs, the hackers exploit the situation to steal valuable assets.

Warnings and Preventive Measures

In response to these threats, the FBI has issued a public warning. They urge individuals to be cautious of unsolicited messages related to cryptocurrency or programming on social media.

 Law enforcement agencies recommend verifying unknown contacts through video calls to ensure their legitimacy, part of broader efforts to combat cybercrime.

Escalating Global Threat

Chainalysis noted that most of the thefts in 2024 occurred between January and July, with 72% of the yearly value pilfered during this period. 

The increased frequency and sophistication of attacks by North Korean hacker groups suggest that they now possess greater capacity for large-scale operations than in the past.

The activities of groups like Lazarus and TraderTraitor highlight the escalating threat posed by North Korean cybercriminals to global cybersecurity.

Their state-backed operations not only destabilize the cryptocurrency market but also fund weapons programs, raising alarm over the broader implications for international security.