Why North Korean Actors May Be Targeting CryptocurrenciesWhy North Korean Actors May Be Targeting Cryptocurrencies
FireEye links North Korean cyberthieves to a recent spate of spearphishing attacks against South Korea.
September 13, 2017

North Korean cybercriminals may increasingly steal Bitcoins and other cryptocurrencies, following the sanctions imposed Monday by the United Nations Security Council over North Korea's persistent nuclear testing, according to a FireEye blog post.
The sanctions, which include capping North Korea's oil imports and banning the country's profitable textile export business, may fuel even more spearphishing attacks against South Korea's cryptocurrency exchanges and other nations' exchanges, FireEye asserts, as North Korean actors seek to fund the government's activities and the pocketbooks of the country's elite.
Last year, FireEye says it noticed North Korean actors shifting their focus from cyber espionage to crimes against traditional banks and financial institutions around the globe. That shift was likely the result of North Korean actors trying to raise funds for government's activities, according to FireEye.
But beginning in May, the security firm says it observed at least three incidents where North Korean actors targeted South Korean cryptocurrency exchanges. The cyberthieves attacked the personal email accounts of employees at the exchanges, and often used bogus tax-related messages as the lure, according to FireEye. The attacks used malware called PEACHPIT, which FireEye links to previous malware used by North Korean actors in last year's attacks against global banks and financial institutions.
Read more about the North Korean cryptocurrency attacks here.
About the Author(s)
You May Also Like
Reducing Cyber Risk in Enterprise Email Systems: It's Not Just Spam and Phishing
Nov 01, 2023SecOps & DevSecOps in the Cloud
Nov 06, 2023What's In Your Cloud?
Nov 30, 2023Everything You Need to Know About DNS Attacks
Nov 30, 2023