{"id":44860,"date":"2022-01-17T16:04:16","date_gmt":"2022-01-17T16:04:16","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/33005\/North-Korean-Hackers-Stole-Nearly-400-Million-In-Crypto-Last-Year.html"},"modified":"2022-01-17T16:04:16","modified_gmt":"2022-01-17T16:04:16","slug":"north-korean-hackers-stole-nearly-400-million-in-crypto-last-year","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\/","title":{"rendered":"North Korean Hackers Stole Nearly $400 Million In Crypto Last Year"},"content":{"rendered":"<figure class=\"intro-image intro-left\"> <img decoding=\"async\" src=\"https:\/\/cdn.arstechnica.net\/wp-content\/uploads\/2021\/02\/GettyImages-924986096-800x600.jpg\" alt=\"North Korean hackers stole nearly $400 million in crypto last year\"><figcaption class=\"caption\"><\/figcaption><\/figure>\n<aside id=\"social-left\" class=\"social-left\" aria-label=\"Read the comments or share this article\"> <a title=\"100 posters participating\" class=\"comment-count icon-comment-bubble-down\" href=\"https:\/\/arstechnica.com\/information-technology\/2022\/01\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\/?comments=1\"> <\/p>\n<h4 class=\"comment-count-before\">reader comments<\/h4>\n<p> <span class=\"comment-count-number\">223<\/span> <span class=\"visually-hidden\"> with 100 posters participating<\/span> <\/a> <\/p>\n<div class=\"share-links\">\n<h4>Share this story<\/h4>\n<\/p><\/div>\n<\/aside>\n<p> <!-- cache hit 148:single\/related:2b00bb3633c39ee8e7f5221de2770026 --><!-- empty --><\/p>\n<p>The past year saw a <a href=\"https:\/\/www.wired.com\/story\/defi-gamestop-memes-doge-musk\/\">breathtaking rise<\/a> in the value of <a href=\"https:\/\/www.wired.com\/story\/crypto-isnt-about-money-its-about-fandom\/\">cryptocurrencies like Bitcoin and Ethereum<\/a>, with Bitcoin gaining 60 percent in value in 2021 and Ethereum spiking 80 percent. So perhaps it&#8217;s no surprise that the relentless <a href=\"https:\/\/www.wired.com\/story\/how-north-korea-robs-banks-around-world\/\">North Korean hackers<\/a> who feed off that booming crypto economy had a very good year as well.<\/p>\n<p>North Korean hackers stole a total of $395 million worth of crypto coins last year across seven intrusions into cryptocurrency exchanges and investment firms, according to blockchain analysis firm Chainalysis. The nine-figure sum represents a nearly $100 million increase over the previous year&#8217;s thefts by North Korean hacker groups, and it brings their total haul over the past five years to $1.5 billion in cryptocurrency alone\u2014not including the uncounted hundreds of millions more the country has stolen from the traditional financial system. That hoard of stolen cryptocurrency now contributes significantly to the coffers of Kim Jong-un&#8217;s totalitarian regime as it seeks to fund itself\u2014and its <a href=\"https:\/\/www.wired.com\/story\/north-korea-missile-test-scarier-than-it-seemed\/\">weapons programs<\/a>\u2014despite the country&#8217;s heavily sanctioned, isolated, and ailing economy.<\/p>\n<figure class=\"image shortcode-img right full\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/cdn.arstechnica.net\/wp-content\/uploads\/2019\/02\/wired-logo.png\" width=\"218\" height=\"58\"><\/figure>\n<p>&#8220;They&#8217;ve been very successful,&#8221; says Erin Plante, a senior director of investigations at Chainalysis, <a href=\"https:\/\/blog.chainalysis.com\/reports\/north-korean-hackers-have-prolific-year-as-their-total-unlaundered-cryptocurrency-holdings-reach-all-time-high\/\">whose report calls 2021 a &#8220;banner year&#8221; for North Korean cryptocurrency thefts<\/a>. The findings show that North Korea&#8217;s global, serial robberies have accelerated even in the midst of an attempted law enforcement crackdown; the US Justice Department, for instance, <a href=\"https:\/\/www.wired.com\/story\/north-korea-hackers-indictment-cryptocurrency-sony-swift\/\">indicted three North Koreans in absentia in February of last year<\/a>, accusing them of stealing at least $121 million from cryptocurrency businesses along with a slew of other financial crimes. Charges were also brought against a Canadian man who had allegedly helped to launder the funds. But those efforts haven&#8217;t stopped the hemorrhaging of crypto wealth. &#8220;We were excited to see actions against North Korea from law enforcement agencies,&#8221; Plante says, &#8220;yet the threat persists and is growing.&#8221; <\/p>\n<aside class=\"ad_wrapper\" aria-label=\"In Content advertisement\"> <span class=\"ad_notice\">Advertisement <\/span> <\/aside>\n<p>The Chainalysis numbers, based on exchange rates at the time the money was stolen, don&#8217;t merely point to an appreciation of cryptocurrency&#8217;s value. The growth in stolen funds also tracks with the number of thefts last year; the seven breaches Chainalysis tracked in 2021 amount to three more than in 2020, though fewer than the 10 successful attacks that North Korean hackers carried out in 2018, when they stole a record $522 million.<\/p>\n<p>For the first time since Chainalysis began tracking North Korean cryptocurrency thefts, Bitcoin no longer represents anywhere near the majority of the country&#8217;s take, accounting for only around 20 percent of the stolen funds. Fully 58 percent of the groups&#8217; cryptocurrency gains came instead in the form of stolen ether, the Ethereum network&#8217;s currency unit. Another 11 percent, around $40 million, came from stolen ERC-20 tokens, a form of crypto asset used to create smart contracts on the Ethereum blockchain.<\/p>\n<p>Chainalysis&#8217;&nbsp;Plante attributes that increased focus on Ethereum-based cryptocurrencies\u2014$272 million in total thefts last year versus $161 million in 2020\u2014to the skyrocketing price of assets in the Ethereum economy, combined with the nascent companies that growth has fostered. &#8220;Some of these exchanges and trading platforms are just newer and potentially more vulnerable to these types of intrusions,&#8221; she says. &#8220;They&#8217;re trading heavily in ether and ERC-20 tokens, and they&#8217;re just easier targets.&#8221;<\/p>\n<p>While Chainalysis declined to identify most of the victims of the hacker thefts it tracked last year, its report does blame North Korean hackers for the <a href=\"https:\/\/www.elliptic.co\/blog\/liquid-exchange-hacked-94-million-stolen\">theft of around $97 million in crypto assets from the Japanese exchange Liquid.com in August<\/a>, including $45 million in Ethereum tokens. (Liquid.com didn&#8217;t respond to WIRED&#8217;s request for comment on its August hacker breach.) Chainalysis says it linked all seven 2021 cryptocurrency hacks to North Korea based on malware samples, hacking infrastructure, and following the stolen money into clusters of blockchain addresses it has identified as controlled by the North Korean hackers.<\/p>\n<p>Chainalysis says the thefts were all carried out by Lazarus, a loose grouping of hackers all widely believed to be working in the service of the North Korean government. But other hacker-tracking firms have pointed out that Lazarus comprises many distinct groups. Security firm Mandiant nonetheless echoes Chainalysis&#8217; findings that stealing cryptocurrency has become a priority for virtually all of the North Korean groups it tracks, in addition to whatever other missions they may pursue.<\/p>\n<aside class=\"ad_wrapper\" aria-label=\"In Content advertisement\"> <span class=\"ad_notice\">Advertisement <\/span> <\/aside>\n<p>Last year, for instance, two North Korean groups Mandiant calls TEMP.Hermit and Kimsuky both seemed tasked with targeting biomedical and pharmaceutical organizations, likely to steal information related to COVID-19, says Fred Plan, a senior analyst at Mandiant. Yet both groups continued to target cryptocurrency holders throughout the year. &#8220;That consistency of financially motivated operations and campaigns continues to be the undercurrent of all these other activities that they had to do in the past year,&#8221; says Plan.<\/p>\n<p>Even the group Mandiant calls APT38\u2014which has previously focused on more traditional financial intrusions, such as the <a href=\"https:\/\/www.wired.com\/2016\/05\/insane-81m-bangladesh-bank-heist-heres-know\/\">theft of $110 million from the Mexican financial firm Bancomext and $81 million from Bangladesh&#8217;s Central Bank<\/a>\u2014now appears to have turned its sights on cryptocurrency targets. &#8220;Almost all of the North Korean groups we track have a finger in the pie of cryptocurrency in some way,&#8221; Plan says.<\/p>\n<p>One reason the hackers have focused on cryptocurrency over other forms of financial crime is no doubt the relative ease of laundering digital cash. After APT38&#8217;s Bangladeshi bank heist, for instance, the North Koreans had to <a href=\"https:\/\/www.bloomberg.com\/news\/features\/2017-08-03\/a-baccarat-binge-helped-launder-the-world-s-biggest-cyberheist\">enlist Chinese money launderers to gamble its tens of millions at a casino in Manila<\/a> to prevent investigators from tracking the stolen funds. By contrast, Chainalysis found that the groups have plenty of options to launder its stolen cryptocurrency. They&#8217;ve cashed out their gains through exchanges\u2014largely exploiting ones based in Asia and trading their cryptocurrency for Chinese renminbi\u2014that have less-than-stringent compliance with &#8220;know-your-customer&#8221; regulations. The groups have often used &#8220;mixing&#8221; services to obscure the money&#8217;s origins. And in many cases they&#8217;ve used decentralized exchanges designed to directly connect cryptocurrency traders with no intermediary, often with little in the way of anti-money-laundering rules.<\/p>\n<p>Chainalysis found that the North Koreans have been remarkably patient in cashing out their stolen crypto, often holding onto the funds for years before beginning the laundering process. The hackers, in fact, appear to still be holding on to $170 million in unlaundered cryptocurrency from previous years&#8217; thefts, which they&#8217;ll undoubtedly cash out over time.<\/p>\n<p>All of those hundreds of millions, says Mandiant&#8217;s Fred Plan, will end up in the accounts of a highly militarized rogue nation that has spent years under severe sanctions. &#8220;The North Korean regime has figured out they don&#8217;t have any other options. They don&#8217;t have any other real way of engaging with the world or with the economy. But they do have this pretty awesome cyber capability,&#8221; says Plan. &#8220;And they&#8217;re able to leverage it to bring money into the country.&#8221;<\/p>\n<p>Until the cryptocurrency industry figures out how to secure itself against those hackers\u2014or to prevent their coins from being laundered and converted into clean bills\u2014the Kim regime&#8217;s illicit, ethereal revenue stream will only continue to grow.<\/p>\n<p><em>This story originally appeared on <a href=\"https:\/\/www.wired.com\/story\/north-korea-cryptocurrency-theft-ethereum\/\">wired.com<\/a>.<\/em><\/p>\n<p> READ MORE <a href=\"https:\/\/packetstormsecurity.com\/news\/view\/33005\/North-Korean-Hackers-Stole-Nearly-400-Million-In-Crypto-Last-Year.html\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":44861,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[60],"tags":[9824],"class_list":["post-44860","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-packet-storm","tag-headlinegovernmentcybercrimedata-lossfraudkoreacryptography"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>North Korean Hackers Stole Nearly $400 Million In Crypto Last Year 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"North Korean Hackers Stole Nearly $400 Million In Crypto Last Year 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2022-01-17T16:04:16+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cdn.arstechnica.net\/wp-content\/uploads\/2021\/02\/GettyImages-924986096-800x600.jpg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"North Korean Hackers Stole Nearly $400 Million In Crypto Last Year\",\"datePublished\":\"2022-01-17T16:04:16+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\\\/\"},\"wordCount\":1196,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year.jpg\",\"keywords\":[\"headline,government,cybercrime,data loss,fraud,korea,cryptography\"],\"articleSection\":[\"Packet Storm\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\\\/\",\"name\":\"North Korean Hackers Stole Nearly $400 Million In Crypto Last Year 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year.jpg\",\"datePublished\":\"2022-01-17T16:04:16+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year.jpg\",\"width\":800,\"height\":600},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"headline,government,cybercrime,data loss,fraud,korea,cryptography\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/headlinegovernmentcybercrimedata-lossfraudkoreacryptography\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"North Korean Hackers Stole Nearly $400 Million In Crypto Last Year\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"North Korean Hackers Stole Nearly $400 Million In Crypto Last Year 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\/","og_locale":"en_US","og_type":"article","og_title":"North Korean Hackers Stole Nearly $400 Million In Crypto Last Year 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2022-01-17T16:04:16+00:00","og_image":[{"url":"https:\/\/cdn.arstechnica.net\/wp-content\/uploads\/2021\/02\/GettyImages-924986096-800x600.jpg","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"North Korean Hackers Stole Nearly $400 Million In Crypto Last Year","datePublished":"2022-01-17T16:04:16+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\/"},"wordCount":1196,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2022\/01\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year.jpg","keywords":["headline,government,cybercrime,data loss,fraud,korea,cryptography"],"articleSection":["Packet Storm"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\/","url":"https:\/\/www.threatshub.org\/blog\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\/","name":"North Korean Hackers Stole Nearly $400 Million In Crypto Last Year 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2022\/01\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year.jpg","datePublished":"2022-01-17T16:04:16+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2022\/01\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2022\/01\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year.jpg","width":800,"height":600},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/north-korean-hackers-stole-nearly-400-million-in-crypto-last-year\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"headline,government,cybercrime,data loss,fraud,korea,cryptography","item":"https:\/\/www.threatshub.org\/blog\/tag\/headlinegovernmentcybercrimedata-lossfraudkoreacryptography\/"},{"@type":"ListItem","position":3,"name":"North Korean Hackers Stole Nearly $400 Million In Crypto Last Year"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/44860","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=44860"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/44860\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/44861"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=44860"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=44860"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=44860"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}