North Korea Cracks Down on Cyber Ring that Looted State Banks

A clandestine network of former North Korean cyber operatives was dismantled by the State Intelligence Bureau after breaching two of the country's most sensitive financial institutions, the Central Bank of Korea and the Foreign Trade Bank. The group used specialized Chinese wireless equipment paired with encrypted messaging applications to avoid detection.

The operatives split stolen funds into numerous small transfers, a common laundering technique, before converting them into cryptocurrency through Chinese brokers. The physical cash was then smuggled across the border through local associates in Sinuiju and Hyesan.

The suspects were formerly affiliated with North Korea's General Reconnaissance and Intelligence Bureau, which has been linked to state-directed hacking campaigns targeting foreign financial institutions and cryptocurrency exchanges. This internal breach raises uncomfortable questions about oversight, loyalty, and the risks of building a cyber workforce with skills that do not disappear once someone leaves official service.