NK hackers likely targeted cryptocurrency exchange

The prosecution is looking into the possibility that North Korean hackers were responsible for the recent leak of 30,000 user records from Bithumb, a leading online currency exchange based in South Korea.

Authorities said Monday they are tracking IP addresses and access routes linked to the breach. Although not yet confirmed, North Korea is being considered a likely suspect.

Earlier this year, Bithumb reported an employee’s personal computer that held company documents had been compromised, leading to breaches of the private data of an estimated 30,000 users. It reportedly contained data on an account that held over 50 billion won ($44.4 million).

Disguised as job applicants, hackers sent virus-contaminated emails to employees there and subsequently sent phishing emails using the obtained data in order to steal funds from user accounts.

Customers reported receiving follow-up scam calls and texts asking for their account’s authentication codes, and some claimed they suffered actual financial losses.

The breach reportedly occurred in February, but the company did not discover it until June 29. It reported the incident to authorities the next day.

Bithum also compensated each victim with 100,000 won ($88.73) and vowed to give full compensation to those who suffered additional losses upon confirming the exact amount of the stolen funds.

According to a recent report by U.S.-based cybersecurity firm FireEye, the North is increasingly targeting South Korean cyber currency exchanges as a way of securing money while eschewing trade sanctions.

This threat is not just being realized in South Korea. Concerns over North Korea’s cyber program have been rising globally in response to its growing hacking capabilities. Its attacks on the U.S. and U.K. have become a lot more sophisticated over the years.

Backed by an army of 6,000 hackers, experts believe the North’s cyber program has become an increasingly appealing tool for the repressive country as it entails less risk of sanctions and punishment unlike its nuclear program.

Upon further investigation into the case, authorities here may ask for judicial assistance and cooperation from the international community.