North Korean authorities have arrested a group of state-trained hackers accused of stealing from the country's own banks and laundering the funds through cryptocurrency, according to official reports. The arrests mark a rare instance of the regime turning its cyber apparatus against its own operatives, rather than targeting foreign institutions.
The charges
The hackers, trained by the state, are alleged to have exploited their skills to siphon money from North Korean banks. The stolen funds were then moved through cryptocurrency channels — a method the regime itself has often used to evade international sanctions. Details on the number of hackers or the amount stolen have not been disclosed.
A shift in focus
North Korea has long been accused of using state-backed hackers to steal from foreign banks and crypto exchanges to fund its weapons programs. But this case is different: the targets were domestic. The arrests could signal a crackdown on internal corruption or a move to tighten control over the country's elite hacker units. It's unclear whether the hackers acted independently or as part of a faction.
Crypto as the trail
Cryptocurrency played a central role in the alleged scheme. The hackers used it to launder the proceeds, likely moving funds through mixers or exchanges. This isn't the first time North Korean hackers have used crypto — they're known for sophisticated laundering operations. But in this case, the trail led back to them within the country.
What comes next
The arrested hackers face severe penalties under North Korean law. The regime has not said whether the case will lead to broader purges within its cyber units. For now, the episode highlights the risks of training a generation of hackers — even for a state that relies on them.
