South Korea Takes Strong Action Against North Korean Cyber Criminals

The South Korean government has imposed sanctions on 15 North Korean individuals and one entity for their involvement in cyber crimes, particularly targeting cryptocurrency thefts. This decisive action aims to curb the funding of North Korea's nuclear and missile programs through illicit overseas IT activities.

Key Takeaways

• South Korea sanctions 15 North Koreans and one entity linked to cyber crimes.

• The sanctioned individuals are associated with North Korea's General Bureau 313, involved in weapons production.

• The sanctions follow a previous round of sanctions just nine days earlier.

• North Korean cyber activities are estimated to have stolen $1.3 billion in cryptocurrency in 2024.

Background of the Sanctions

On December 26, 2024, the South Korean Foreign Ministry announced the sanctions, highlighting the ongoing threat posed by North Korean cyber activities. The individuals sanctioned are believed to have been operating in various locations, including China and Equatorial Guinea, to generate foreign currency for the North Korean regime.

The General Bureau 313, under the Munitions Industry Department, is known for its role in developing military technology and has been under UN sanctions since 2016. The recent sanctions are part of a broader strategy to combat North Korea's illegal funding methods, particularly through cyber theft and hacking.

Details of the Sanctioned Individuals

Among the 15 individuals sanctioned, several have been identified for their significant roles in cyber crimes:

1. Pak Hung-ryong - Involved in overseas IT operations.

2. Yun Jong-sik - Linked to military software development.

3. Ri Il-jin - Engaged in generating foreign currency through IT contracts.

4. Kim Chol-min - Worked undercover in U.S. and Canadian companies, remitting funds to North Korea.

5. Kim Ryu-song - Indicted in a U.S. court for violating sanctions.

These individuals are part of a larger network that has been exploiting global IT opportunities to fund North Korea's military ambitions.

Implications of the Sanctions

The sanctions are set to take effect on December 30, 2024, and will require any financial transactions involving the sanctioned individuals to receive prior approval from South Korean authorities. This move is expected to tighten the financial noose around North Korea's cyber operations, which have been increasingly sophisticated in recent years.

According to blockchain analytics firm Chainalysis, North Korean hackers have been responsible for approximately 61% of global cryptocurrency theft in 2024, amounting to an estimated $1.3 billion. This alarming statistic underscores the urgency of international efforts to combat cybercrime emanating from North Korea.

Sources

• Seoul sanctions 15 North Korean individuals, one entity for illegal overseas IT activities, Korea JoongAng Daily.

• South Korea Sanctions North Korean Individuals and Entity Over Crypto Heists, Cryptonews.

• South Korea sanctions 15 North Koreans for crypto heists and cyber theft - StartupNews.fyi - Startup & Technology News, StartupNews.fyi.