Technology
North Korean hackers transfer stolen crypto to wallet of Asian payment firm – Crypto News
An investigation has brought to light an unexpected link between a prominent payments company in Cambodia and North Korean hackers.
According to blockchain data, Phnom Penh-based Huione Pay received over $150,000 in cryptocurrency from a digital wallet connected to the infamous Lazarus hacking group.
Linked to North Korea, the Lazarus group has been implicated in significant cryptocurrency heists. In 2023, they attacked three crypto companies – Atomic Wallet, CoinsPaid, and Alphapo – and stole approximately $160 million. The United States considers these thefts part of a broader pattern of cybercrime financing North Korea’s weapons programs.
Providing currency exchange and remittance services, Huione Pay received the cryptocurrency funds between June 2023 and February 2024. As reported by Reuters, the company claims it was unaware of the source of the funds, blaming the complex nature of wallet transactions. Yet, crypto security experts note that there are tools to identify and avoid high-risk wallets.
The incident exposes at least one way North Korean hackers could be laundering stolen money through Southeast Asian financial systems. The United Nations has previously said that cryptocurrencies have provided North Korea the “perfect tools” to avoid sanctions and buy prohibited goods and services.
Among Huione Pay’s board members is Hun To, a cousin of Cambodia’s Prime Minister Hun Manet. There’s no evidence that Hun To or the ruling family of Cambodia were aware of these transactions, but it does highlight how far such illicit operations can spread.
The country’s central bank, the National Bank of Cambodia (NBC), states that businesses such as Huione are not authorised to conduct trades in cryptocurrencies. The ban, which came into force in 2018, is intended to avoid investment losses as well as money laundering and terrorism financing-related risks. The NBC has said it will review Huione’s conduct but did not specify what action would be taken.
Tracing the crypto trail
Analysis of the stolen funds from hacks in 2023 carried out by blockchain analysis firms TRM Labs and Merkle Science. They discovered that the hackers went to great lengths to obfuscate their money trail, converting stolen crypto into other forms of cryptocurrencies and engaging in multiple wallet transfers.
The stolen funds were primarily converted to Tether (USDT), a stablecoin, on the Tron blockchain. Tron’s speed and low cost make it popular for transactions, but it has also attracted illicit actors. A Tron spokesperson condemned such abuse of blockchain technologies but did not comment specifically on the Atomic Wallet hack.
Southeast Asia: A hotspot for cyber money laundering
Analysts say the area has become a significant cybercrime and high-tech money laundering centre in Southeast Asia. It is also full of unregulated crypto-based service providers, and online casinos that can serve as ‘underground banks’.
Jeremy Douglas, a former regional director for the UN Office on Drugs and Crime in Southeast Asia, says criminal groups, including Lazarus, are agile, and remain a step ahead of law enforcement. Their operations now depend on the technology and infrastructure present throughout Southeast Asia.
While Cambodia was recently removed from the Financial Action Task Force’s (FATF) ‘grey list’ of countries with inadequate anti-money laundering policies, challenges remain. In a 2021 report, the FATF highlighted “major gaps” in Cambodia’s regulations for crypto firms, an assessment that still stands.
The National Bank of Cambodia says it’s working on new regulations to identify and punish the use of cryptocurrency for illegal activities, including fraud, money laundering, and cybersecurity threats.
Global implications
This case highlights the still-maturing regulations of cryptocurrency by state and federal agencies. Hackers and money launderers are becoming more sophisticated by the day, taking advantage of loopholes in global financial systems, and benefiting from less scrutiny in certain jurisdictions.
It also underscores the imperative for cooperation between countries and financial institutions to tackle cyber-enabled financial crime. The growing prominence of digital currencies as they move towards mainstream acceptance and onto centre stage is a double-edged sword. This involves ensuring their legitimacy across all financial systems and preventing their misuse by criminal enterprises.
As investigations continue, this case reminds us of the intricate nexus between technology, finance, and international security in our increasingly interconnected world.
(Photo by Micha Brändli)
See also: $1.4 billion stolen in crypto hacks in first half of 2024, study finds
Want to learn more about blockchain from industry leaders? Check out Blockchain Expo taking place in Amsterdam, California and London.
Explore other upcoming enterprise technology events and webinars powered by TechForge here.
