<\/p>\n
An investigation has brought to light an unexpected link between a prominent payments company in Cambodia and North Korean hackers.<\/p>\n
According to blockchain data, Phnom Penh-based Huione Pay received over $150,000 in cryptocurrency from a digital wallet connected to the infamous Lazarus hacking group.<\/p>\n
Linked to North Korea, the Lazarus group has been implicated in significant cryptocurrency heists. In 2023, they attacked three crypto companies \u2013 Atomic Wallet, CoinsPaid, and Alphapo \u2013 and stole approximately $160 million. The United States considers these thefts part of a broader pattern of cybercrime financing North Korea\u2019s weapons programs.<\/p>\n
Providing currency exchange and remittance services, Huione Pay received the cryptocurrency funds between June 2023 and February 2024. As reported by Reuters<\/a><\/em>, the company claims it was unaware of the source of the funds, blaming the complex nature of wallet transactions. Yet, crypto security experts note that there are tools to identify and avoid high-risk wallets.<\/p>\n The incident exposes at least one way North Korean hackers could be laundering stolen money through Southeast Asian financial systems. The United Nations has previously said that cryptocurrencies have provided North Korea the \u201cperfect tools\u201d to avoid sanctions and buy prohibited goods and services.<\/p>\n Among Huione Pay\u2019s board members is Hun To, a cousin of Cambodia\u2019s Prime Minister Hun Manet. There\u2019s no evidence that Hun To or the ruling family of Cambodia were aware of these transactions, but it does highlight how far such illicit operations can spread.<\/p>\n The country\u2019s central bank, the National Bank of Cambodia (NBC), states that businesses such as Huione are not authorised to conduct trades in cryptocurrencies. The ban, which came into force in 2018, is intended to avoid investment losses as well as money laundering and terrorism financing-related risks. The NBC has said it will review Huione\u2019s conduct but did not specify what action would be taken.<\/p>\n Tracing the crypto trail<\/strong><\/p>\n Analysis of the stolen funds from hacks in 2023 carried out by blockchain analysis firms TRM Labs and Merkle Science. They discovered that the hackers went to great lengths to obfuscate their money trail, converting stolen crypto into other forms of cryptocurrencies and engaging in multiple wallet transfers.<\/p>\n The stolen funds were primarily converted to Tether (USDT), a stablecoin, on the Tron blockchain. Tron\u2019s speed and low cost make it popular for transactions, but it has also attracted illicit actors. A Tron spokesperson condemned such abuse of blockchain technologies but did not comment specifically on the Atomic Wallet hack.<\/p>\n Southeast Asia: A hotspot for cyber money laundering<\/strong><\/p>\n Analysts say the area has become a significant cybercrime and high-tech money laundering centre in Southeast Asia. It is also full of unregulated crypto-based service providers, and online casinos that can serve as \u2018underground banks\u2019.<\/p>\n Jeremy Douglas, a former regional director for the UN Office on Drugs and Crime in Southeast Asia, says criminal groups, including Lazarus, are agile, and remain a step ahead of law enforcement. Their operations now depend on the technology and infrastructure present throughout Southeast Asia.<\/p>\n While Cambodia was recently removed from the Financial Action Task Force\u2019s (FATF) \u2018grey list\u2019 of countries with inadequate anti-money laundering policies, challenges remain. In a 2021 report, the FATF highlighted \u201cmajor gaps\u201d in Cambodia\u2019s regulations for crypto firms, an assessment that still stands.<\/p>\n The National Bank of Cambodia says it\u2019s working on new regulations to identify and punish the use of cryptocurrency for illegal activities, including fraud, money laundering, and cybersecurity threats.<\/p>\n Global implications<\/strong><\/p>\n This case highlights the still-maturing regulations of cryptocurrency by state and federal agencies. Hackers and money launderers are becoming more sophisticated by the day, taking advantage of loopholes in global financial systems, and benefiting from less scrutiny in certain jurisdictions.<\/p>\n It also underscores the imperative for cooperation between countries and financial institutions to tackle cyber-enabled financial crime. The growing prominence of digital currencies as they move towards mainstream acceptance and onto centre stage is a double-edged sword. This involves ensuring their legitimacy across all financial systems and preventing their misuse by criminal enterprises.<\/p>\n As investigations continue, this case reminds us of the intricate nexus between technology, finance, and international security in our increasingly interconnected world.<\/p>\n (Photo by Micha Br\u00e4ndli<\/a>)<\/em><\/p>\n See also: $1.4 billion stolen in crypto hacks in first half of 2024, study finds<\/a><\/strong><\/p>\n Want to learn more about blockchain from industry leaders?\u00a0Check out\u00a0Blockchain Expo<\/a>\u00a0taking place in Amsterdam, California and London.<\/strong><\/p>\n Explore other upcoming enterprise technology events and webinars powered by TechForge\u00a0<\/strong>here<\/strong><\/a>.<\/strong><\/p>\n