TLDR
- North Korean authorities reportedly arrested elite hackers on July 12.
- The group allegedly stole funds from two state-controlled banks.
- Investigators traced suspicious crypto transfers to a Pyongyang safe house.
- Former cyber warfare operatives reportedly led the hacking ring.
- The group allegedly recruited graduates from leading technical universities.
North Korean authorities have reportedly arrested a group of North Korean hackers accused of stealing and laundering cryptocurrency taken from state financial institutions. Daily NK reported that the arrests followed an internal investigation into suspicious crypto transfers linked to the Chosun Central Bank and the Foreign Trade Bank. The suspects were detained on July 12 after investigators traced the transactions to a safe house in Pyongyang. The report cited an anonymous source inside North Korea.
North Korean Hackers Linked to State Bank Theft
The group reportedly included former members of a cyber warfare unit under the Reconnaissance and Intelligence General Bureau. The North Korean hackers allegedly recruited graduates from Kim Chaek University of Technology and Pyongyang University of Science. They reportedly used encrypted communication systems and Chinese wireless equipment during the operation.
Investigators believe the stolen cryptocurrency was moved through brokers based in China. The brokers allegedly converted the digital assets into cash before contacts near North Korea’s border exchanged the funds into fiat currencies. The investigation reportedly connected these transactions to the arrested North Korean hackers.
International Focus on North Korean Hackers
The United Nations, the United States, South Korea, and Japan have repeatedly accused North Korean hackers of stealing billions of dollars in cryptocurrency. Authorities have linked North Korean cyber groups, including Lazarus Group, to attacks targeting Ronin Bridge, Harmony Horizon Bridge, Atomic Wallet, Alphapo, CoinEx, DMM Bitcoin, and WazirX.
North Korea has consistently rejected those allegations, describing them as politically motivated. If the Daily NK report is accurate, the latest case involves North Korean hackers targeting institutions inside their own country.
Officials have not released the identities of the suspects or announced possible penalties. Daily NK said investigators uncovered the operation after reviewing cryptocurrency transactions connected to state banks. The reported arrests place North Korean hackers at the center of another investigation involving digital assets, while North Korean hackers remain under international scrutiny and North Korean hackers continue to attract global attention.



