- North Korea Plans on Using Bitcoin to Bypass Sanctions
- Is North Korea Engaging With Cryptocurrency Cyberheist?
- North Korea Using Cryptocurrency to Fund Weapons Program, Report Warns
- North Korea linked to new cryptocurrency attacks
- North Korea’s Elusive Hacking Team
- Get the Latest from CoinDesk
- North korea questionable cryptocurrency activities
- The Crazy Reasons Behind This Idea
- North Korea reportedly steals cryptocurrency to bankroll its nuclear program
- In This Stream
- North Korean nuclear program causes new tensions with US
The US keeps imposing new sanctions on North Korea over its nuclear program but they’re not changing Kim Jong Un’s behavior — and for a surprising reason: Pyongyang’s skill at using cryptocurrencies.
Five days ago, America sanctioned dozens of ships, shipping companies, and other firms that allegedly help Pyongyang fund its nuclear and missiles programs. That move is part of a broader US strategy to starve the North Korean regime of money it would use to improve its weapons.
The Trump administration wants to make these punishments so severe that Pyongyang would potentially be open to negotiations over the programs.
The problem is North Korea can partially skirt financial restrictions with cryptocurrencies, an online form of money,according to Priscilla Moriuchi, formerly a top National Security Agency official charged with overseeing cyber threats from East Asia.
Moriuchi, who is now at the digital intelligence firm Recorded Future, estimates that North Korea earns between $15 million and $200 million by creating and selling cryptocurrencies and then turning it into hard cash.
North Korea Plans on Using Bitcoin to Bypass Sanctions
(Their take fluctuates depending on the digital currency’s worth when North Korea cashes out.) That’s not enough money to fully fund North Korea’s weapons programs, to be sure, but it ensures they don’t completely shut down.
So even though sanctions hurt North Korea’s physical economy, there are currently few ways America can curb Pyongyang’s growing digital economy.
That means North Korea has an even greater ability to keep its nuclear program running than we might think.
“I would bet that these coins are being turned into something — currency or physical goods — that are supporting North Korea’s nuclear and ballistic missile program,” Moriuchi told me.
A transcript of our conversation, lightly edited for length and clarity, follows.
Why is cryptocurrency useful for North Korea?
There are not very many ID or security requirements, and many of these currencies are founded around — or at least very much focused on — security and anonymity for their users.
That kind of makes it a perfect platform for countries like North Korea, which are pretty isolated from the international financial system to begin with, to use this new form of commerce that’s thus far existed pretty much outside of countries’ regulatory control.
How does a country collect, or mine, bitcoin? Is it different from how an individual would do so?
Mining is just the way in which a cryptocurrency is generated.
Creating a single coin requires many computers to solve a number of mathematical problems. And once you’ve solved the problems, then it builds what’s called a block.
Is North Korea Engaging With Cryptocurrency Cyberheist?
That block is essentially the currency itself — you get rewards for creating a block.
Anyone can create a block, whether you’re an individual or a country.
North Korea Using Cryptocurrency to Fund Weapons Program, Report Warns
It tends to be a computationally intensive and energy-intensive process. You need access to a very stable and high-bandwidth internet connection.
Then once you build the block you get the reward, which is typically a reward in that currency.
The US, along with the United Nations, continually sanction North Korea.
North Korea linked to new cryptocurrency attacks
They usually try to stop North Korea from trading their top exports, like iron, coal, and seafood.
But you’re basically saying that North Korea is using digital currency in order to make money and partially evade those kinds of physical sanctions imposed on them, right?
The majority of international and US sanctions thus far have focused on pressure points on territorial North Korea and the North Korean regime.
Those sanctions have been ongoing for years and years and years at this point, but the regime has not abandoned its drive to develop ballistic missiles or nuclear weapons.
North Korea, then, uses the internet to support itself, and its weapons programs, while getting around these sanctions.
Is North Korea doing all of this from home, or do they have operations elsewhere?
One of the things we know from defector testimony, for example, is that North Korea has built a network of operational bases in foreign countries where they execute cyber operations.
What are some of those countries?
There’s some in China and some in Southeast Asia.
We’ve seen a good deal of North Korean activities in countries such as India, Malaysia, the Philippines, and we believe there are operational bases in some of those countries. We haven’t gotten all the way down yet to a street address or anything, though.
North Korea cyber operators sent to these foreign operations bases have two jobs.
One, to conduct the operations that the North Korean regime tells them to conduct.
North Korea’s Elusive Hacking Team
And two, to earn money. The majority of that money, about 80 to 90 percent, is sent back to the regime, and only a small amount is for the operators themselves to keep.
How big is North Korea’s cryptocurrency operation?
We don’t know the scale.
I saw a small-scale North Korean bitcoin mining operation last summer, but not anything on the factory-level scale like we will see sometimes in, like, China or Russia, for example.
On the surface, all of this sounds pretty sketchy and illegal.
But it’s not illegal in any way, unlike a lot of the things that North Korea is doing today to generate funds: counterfeiting US dollars and cigarettes or selling wildlife and illegal drugs.
Have we seen other countries use cryptocurrencies to buy physical things?
Get the Latest from CoinDesk
We don’t necessarily know that North Korea’s buying fishing boats, but have we seen Russia buy stuff too?
That can happen: Any user can buy physical things with bitcoin.
You can buy pizzas at restaurants. You can buy goods at stores around the world.
North korea questionable cryptocurrency activities
You can buy malware from dark web markets online. We haven’t seen anyone buying coal, for example, but just because we haven’t seen it doesn’t mean it’s not out there.
But North Korea has such extensive criminal networks that have been well-established for decades to facilitate illegal activities. If Pyongyang were able to cash out into physical currency, it would be relatively easy for them to move that currency back into North Korea and to buy things with the physical currency.
How could North Korea could turn digital cash into hard cash?
There was a quite well-publicized banking theft from the Bank of Bangladesh back in 2015 that North Korea was responsible for.
They ended up transferring, or stealing, about $81 million from the Central Bank of Bangladesh that then got transferred to bank accounts in the Philippines.
Those accounts were then cashed out within a few days, and then the money was run through casinos in the Philippines and Macau and basically disappeared.
That’s a great example of money going from the virtual to the physical.
The US has gotten quite good at sanctioning physical things.
The Crazy Reasons Behind This Idea
Why aren’t we so good at stopping digital currency activity?
The problem, especially when it comes to cryptocurrencies, is that they’re so loosely regulated. There are relatively few countries that impose any type of security on the network or identification laws for users of the exchanges. There’s not a document or a paper trail, so it’s very hard to find targets for any sort of sanctions.
We can say “North Korea is using bitcoin,” but we can’t sanction Bitcoin as an entity because Bitcoin is not a person responsible — it’s just distributed technology. So instead, we’re having to drill even deeper and try to look for wallets that North Korea has used or even exchanges that can be compelled to give data to law enforcement.
North Korea reportedly steals cryptocurrency to bankroll its nuclear program
I think it’s just the lack of regulations in the digital world, kind of combined with such a broad target space, that’s made it difficult to sanction.
Would you place a bet that North Korea is using digital currency in some way to improve its nuclear program?
I would bet that these coins are being turned into something — currency or physical goods — that are supporting North Korea’s nuclear and ballistic missile program.
It could be pretty simple.
After they cash it out, they take the hard cash to a bank that they work closely with.
Once they deposit the cash in that bank, then it becomes part of their assets.
If you had a meeting with President Trump or UN Ambassador Nikki Haley to talk about how to stop North Korea in the digital currency space, what would you tell them?
First, we would need to enlist partner countries to increase regulations on the exchanges and the wallet providers.
That helps create a paper trail we can use to identify North Korean accounts and how North Korea is moving these currencies.
And second, we should establish a robust sharing environment similar to the one that governments have with financial institutions, where you have to report or track transactions over a certain dollar amount, like $10,000.
We should set some limits on when these exchanges have to report transactions over a certain number of, say, coins. That could be another way we could find some of this criminality as well.
How scared should we be that North Korea is going to continue getting better in the digital space, which therefore helps it to continue to get better in its nuclear and missiles program?
When it comes to consequences for cyber operations, there have been relatively few for any country.
That holds true for North Korea as well.
But even so, there doesn’t seem to be a resource constraint on North Korea right now. There’s certainly not an international constraint when it comes to limiting their movement in other countries or limiting their information technology or computer science training.