愛污传媒

Skip to main content

U.S. seizes US$30 million in stolen cryptocurrency from North Korean hackers

In this photo illustration of the ethereum cryptocurrency 'altcoin' sits arranged for a photograph on April 25, 2018 in London, England. (Jack Taylor/Getty Images/CNN)
In this photo illustration of the ethereum cryptocurrency 'altcoin' sits arranged for a photograph on April 25, 2018 in London, England. (Jack Taylor/Getty Images/CNN)
Share

The FBI and private investigators have seized about US$30 million worth of cryptocurrency stolen by North Korean government-linked hackers from a video game company in March, according to Chainalysis, a U.S. firm that said it worked with the FBI to claw back the stolen money.

It's the latest example of a concerted effort from US law enforcement to recover some of the hundreds of millions of dollars that Pyongyang's hackers have allegedly plundered from cryptocurrency firms in recent months 鈥 money that U.S. officials worry is used to fund North Korean's nuclear weapons programs.

The US$30 million recovered is just a fraction of the equivalent of more than $600 million that the FBI said the North Korean hackers originally stole from Sky Mavis, a company with an office in Vietnam that makes a popular video game that allows users to earn digital money. But the seizure is still a breakthrough for law enforcement, and investigators are actively trying to recover some of the remaining loot, according to Erin Plante, Chainalysis' senior director of investigations.

The FBI and the Justice Department did not immediately respond to CNN's request for comment.

"The money has been frozen by [law enforcement]," Sky Mavis co-founder Aleksander Leonard Larsen told CNN. "No funds returned as of yet and we expect it to take time until the community gets the funds back. Note also that all user funds have been reimbursed."

The Wall Street Journal first reported the seizure.

North Korean government-backed hackers have stolen the equivalent of billions of dollars in recent years by raiding cryptocurrency exchanges, according to the United Nations.

In separate but related activity, a recent CNN investigation found that North Korean operatives posing as other nationalities had tried to land jobs at cryptocurrency firms in the U.S. and abroad. The activity, U.S. officials have publicly warned, is part of an effort to earn "a critical stream of revenue" that helps bankroll the North Korean regime's "highest economic and security priorities," including its weapons programs.

North Korean hackers also used ransomware 鈥 malicious software that locks computers in an extortion scheme 鈥 to target medical providers in Kansas and Colorado last year, according to the U.S. Justice Department. The department recovered half a million dollars that the North Koreans extorted in those cases, Deputy Attorney General Lisa Monaco said in July.

The Treasury Department has tried to crack down on the North Korean hackers' targeting of cryptocurrency by sanctioning some accounts that they use to move money, and a "mixer," or service that the hackers have allegedly used to launder stolen cryptocurrency.

Those actions have made it harder for the North Korean hackers to cash out the stolen funds, Plante said.

"That's a lot of dirty money right there, so it becomes increasingly difficult to move these funds to a service to cash them out," Plante told CNN.

But there are still many mixing services that haven't been sanctioned, Plante said, adding that she expected the North Korean hackers to change services to try to evade US law enforcement.

For investigators, the time immediately after a hack is critical in trying to recover money that the attackers attempt to launder through cryptocurrency accounts. The FBI has continued to appeal to victims to share information on those accounts soon after a hack is discovered to increase the chances of recovering stolen funds.

Justice Department officials in June 2021 seized roughly half of the estimated US$4.4 million ransom payment that Colonial Pipeline, which provides roughly 45 per cent of the fuel consumed on the East Coast, paid to Russian-speaking hackers.

But the seizures still only account for a sliver of the billions of dollars made through cybercrime annually. Cybercriminals received more than US$1.2 billion in ransom payments in 2020 and 2021 combined, according to Chainalysis.

North Korean computer operatives, like those of other foreign powers, are also tasked with collecting valuable intelligence for the regime, according to US officials and cybersecurity experts. Between February and July, suspected North Korean hackers were involved in a spying campaign to gather information on energy firms in the U.S., Japan and Canada, Talos, Cisco's threat intelligence unit, said Thursday.

CTVNews.ca Top Stories

Elections BC released its first partial results of the final count in B.C.'s 2024 provincial election Saturday afternoon, and the data shows NDP candidates gaining in some tight races.

Ontario Provincial Police say a 16-year-old person has been charged with second-degree murder after a 15-year-old was found dead at a home in Perth, Ont. Friday afternoon.

Angela Salvatore had been away from her father's hospital bedside for just over an hour when she says she got a frantic call from a nurse, pleading with her to calm him down.

A veteran Ottawa journalist is firing back against what he says are "entirely false" claims by a former Conservative cabinet minister that he acted as a Russian agent.

Canadian Ryan James Wedding finished in 24th place in the parallel giant slalom at the 2002 Winter Games in Salt Lake City, but the snowboarder wouldn鈥檛 go on to improve his results in Torino four years later.

The mystery of a 100-year-old letter sent from Manitoba to Ireland is slowly unraveling thanks to the work of one amateur sleuth.

Local Spotlight

A new resident at a Manitoba animal rescue has waddled her way into people's hearts.

Hundreds of people ran to the music of German composer and pianist Beethoven Wednesday night in a unique race in Halifax.

He is a familiar face to residents of a neighbourhood just west of Roncesvalles Avenue.

A meteor lit up our region's sky last night 鈥 with a large fireball shooting across the horizon over Lake Erie at around 7:00 p.m.

Residents of Ottawa's Rideauview neighbourhood say an aggressive wild turkey has become a problem.

A man who lost his life while trying to rescue people from floodwaters, and a 13-year-old boy who saved his family from a dog attack, are among the Nova Scotians who received a medal for bravery Tuesday.

A newly minted Winnipegger is hoping a world record attempt will help bring awareness for the need for more pump track facilities in the city.

A Springfield, Ont. man is being hailed a 'hero' after running into his burning home to save his two infant children.

Hortense Anglin was the oldest graduate to make her way across the platform at York University's Fall Convocation ceremony this week. At the age of 87, she graduated with an Honours degree in Religious Studies.