North Korean hackers behind attacks on cryptocurrency exchanges: South Korean intelligence

The cyber attacks attributed to North Korean hackers also included the leaking of personal information from 36,000 accounts from the world's busiest cryptocurrency exchange Bitthumb in June.
The cyber attacks attributed to North Korean hackers also included the leaking of personal information from 36,000 accounts from the world's busiest cryptocurrency exchange Bitthumb in June.PHOTO: BLOOMBERG

SEOUL - South Korea's spy agency said North Korean hackers were behind attacks on cryptocurrency exchanges this year in which some 7.6 billion won (S$9.5 million) worth of cryptocurrencies were stolen, a newspaper reported on Saturday (Dec 16).

The cyber attacks attributed to North Korean hackers also included the leaking of personal information from 36,000 accounts from the world's busiest cryptocurrency exchange Bitthumb in June, South Korea's major newspaper Chosun Ilbo reported, citing the country's National Intelligence Service (NIS).

Attacks also included the theft of cryptocurrencies from accounts at exchanges Yapizon, now called Youbit, and Coinis in April and September, it said.

The 7.6 billion won of stolen cryptocurrencies are now worth about 90 billion won, Chosun Ilbo reported. It also cited the NIS as saying North Korean hackers had also demanded 6 billion won from Bitthumb in return for deleting the leaked personal information.

Another cyber attack on about 10 cryptocurrency exchanges by North Korean hackers in October, using emails containing malware, was thwarted by the Korea Internet Security Agency (KISA), the newspaper reported.

The NIS found that the malware used in hacking the exchanges was made with the same method as malware used in hacking Sony Pictures and the central bank of Bangladesh in 2014 and 2016 respectively, the Chosun Ilbo reported.

The NIS also said emails used in the attacks used North Korean internet addresses, according to the Chosun Ilbo.