Treasury Cracks Down on North Korean Sanctions Evasion Through Crypto Laundering

by

As a seasoned crypto investor with over a decade of experience in this dynamic industry, I’ve seen my fair share of ups and downs, twists and turns. However, nothing quite compares to the chilling revelations about North Korea’s involvement in cybercrime and money laundering activities. The recent sanctions imposed by the US Department of the Treasury’s Office of Foreign Assets Control (OFAC) on individuals like Lu Huaying, Zhang Jian, and Sim Hyon Sop, along with entities such as Green Alpine Trading, LLC, are a stark reminder that the dark underbelly of the crypto world is very real.

The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) has imposed sanctions on three parties: two individuals and one organization, who are part of a money laundering scheme that moves tens of millions of illegal funds to North Korea.

Lu Huaying and Zhang Jian, operating out of the United Arab Emirates (UAE), employed a local business front to orchestrate money laundering activities and convert cryptocurrencies. This illicit operation channeled the profits towards Pyongyang.

OFAC Imposes Sanctions

On December 17th, as mentioned in its official statement, the OFAC indicated that North Korea persists in utilizing intermediaries and proxies to carry out illicit financial activities within the global system. Additionally, these operations are reportedly a component of the nation’s broader strategy aimed at undermining international security, which has recently expanded to include strengthening military ties with Russia, reaching into Europe.

As a concerned crypto investor, I’ve been following the latest developments regarding Sim Hyon Sop, who is allegedly operating from within the People’s Republic of China, representing the DPRK’s Korea Kwangson Banking Corp (KKBC). He is said to be a significant player in these activities, acting as an agent for North Korean financial institutions.

Since 2022, it’s been claimed that Huaying has been part of a scheme to wash over $ millions in funds illegally generated from DPRK operations by swapping cryptocurrency into regular currency. Over this period up until September 2023, the suspect employed various techniques such as money mules for these transactions. In parallel, Jian is said to have assisted in exchanging fiat money and served as a messenger for Sim.

The Office of Foreign Assets Control (OFAC) has decided to sanction Huaying, Zhang Jian, and Green Alpine Trading, LLC, a United Arab Emirates-based firm acting as a front for the network, due to their involvement in facilitating Sim’s illegal activities.

The Deputy Under Secretary of the Treasury for Counter-Terrorist Financing and Financial Crimes, Bradley T. Smith, made a statement.

The DPRK persists in employing intricate fraud strategies to finance its weapons of mass destruction (WMD) and missile programs, often involving digital assets. The US Treasury is committed to dismantling the systems that channel funds to this regime. In collaboration with the UAE and our other allies, we will keep on aiming at the financial structures that empower the Kim regime’s actions which destabilize the region.

North Korean Hackers Execute Wide-Ranging Crypto Heist

The cyber activities conducted by North Korea have caused substantial damage within the cryptocurrency sector, as illustrated by numerous high-profile breaches and exploits. Recently, it was reported by ZachXBT that developers from North Korea infiltrated more than 25 crypto projects under false identities, managing to steal approximately $1.3 million through malicious coding.

In October, it was revealed that hackers connected to the Lazarus Group from North Korea allegedly created a phony NFT game and exploited a vulnerability in Chrome to steal digital wallet information. The game, marketed through social engineering methods, contained malware designed to gather sensitive data. Even though Google issued a fix, the attackers had already carried out extensive cryptocurrency heists.

In November, it was verified by South Korean authorities that hacking groups Lazarus and Andariel from North Korea were behind the 2019 cyber heist of Upbit cryptocurrency exchange, making off with approximately $50 million in Ethereum (ETH). Working together with the FBI and Swiss prosecutors, they discovered crucial evidence such as North Korean IP addresses and patterns of virtual asset movement. The illicit funds were laundered through various platforms.

In the course of my analysis, I’ve uncovered some troubling news: A hack on Radiant Capital’s DeFi platform, which took place in October 2024, was orchestrated by a North Korean hacking group. These cybercriminals executed their attack through a malware scheme deployed via Telegram, successfully exploiting one of the platform’s developers. The aftermath of this attack included the installation of a macOS backdoor on the affected system.

Read More

2024-12-22 20:12