US Cracks Down on North Korea’s Crypto Crime Syndicate

The U.S. Treasury Department has sanctioned two Chinese nationals, Lu Huaying and Zhang Jian, along with a UAE-based firm, Green Alpine Trading, for laundering cryptocurrencies on behalf of North Korea’s Democratic People’s Republic of Korea (DPRK).

The two individuals are linked to a broader illicit network led by sanctioned DPRK banking representative Sim Hyon Sop.

Green Alpine Trading, identified as a key node in the money-laundering operation, has been officially designated as a sanctioned entity by the Treasury’s Office of Foreign Assets Control (OFAC).

The Treasury highlighted that North Korea uses proxies and agents to access global financial systems for activities like crypto theft, fraudulent IT work, and money laundering—all aimed at funding its weapons of mass destruction (WMD) and ballistic missile programs.

North Korea’s Lazarus Group, a well-known state-sponsored hacking collective, has been tied to several high-profile cyberattacks, including the $600 million Ronin Ethereum sidechain hack in 2022. The group is known for using sophisticated social engineering tactics, such as impersonating executives or recruiters, to trick victims into clicking on malicious links.

Reports from the UN Security Council, as cited by South Korea’s Yonhap News Agency, estimate that around 50% of North Korea’s foreign currency revenue is generated through state-backed crypto hacking. Much of this revenue allegedly supports WMD and missile development programs.

The new sanctions aim to dismantle DPRK’s illicit financial network and restrict its ability to fund its weapons programs.

Image Credit: Pixabay