For that they have Chinese brokers and middlemen who turn the loot into useable funds, which Kim Jong Un’s regime will undoubtedly spend on weapons and missiles, experts told The Post.
asserted
experts → have → Post
What North Korea needs to advance its missile program and its nuclear weapons development program is stuff that exists outside North Korea.
asserted
that → need → Korea
“Stealing cryptocurrency gives North Korea a sort of international slush fund that it can move around the world without using banks, and it can pay people off, and buy the stuff that it needs,” Geoff White, author of “The Lazarus Heist” which investigates North Korea’s hackers told The Post.
asserted
which → steal → Post
Chinese laundering crews are believed to have taken over after the hackers’ initial transfers within 20 minutes of the hack last week, according to Nick Carlsen, an investigator at blockchain intelligence firm TRM Labs.
uncertain
crews → believe → Labs
Most of the Binance funds moved across 10 blockchains in about 20 minutes, according to TRM.
uncertain
Most → move → TRM
Attackers then raced to swap assets issuers were able to freeze for unsanctioned cryptocurrencies beyond their control.
asserted
issuers → race → control
“From that point on, it’s almost exclusively Chinese money laundering teams that are actually doing all of the transactions,” he told The Post.
asserted
he → ’ → Post
In its first three and a half days, the laundering operation then used about 12,000 digital wallets—roughly one new wallet every 25 seconds—according to blockchain analytics firm Elliptic.
uncertain
operation → use → Elliptic
The transfers complicated tracking but have not make the money untraceable.
asserted
money → complicate → tracking
Carlsen said the stolen money adds to the regime’s coffers, helping fund its spending priorities.
asserted
money → say → priorities
“These massive inflows of hard currency go to the regime, allowing it to pursue its priorities,” he told The Post.
asserted
he → go → Post
The security experts pointed out North Korea’s hackers may not necessarily be stationed in the country, which helps operators blend into other countries’ internet traffic.
uncertain
operators → point → traffic
“We know that North Korean hackers have pitched up in China and been working from there,” White said.
asserted
White → know → China
Carlsen said TRM had observed overlap between the Binance laundering and a Chinese network handling earlier North Korean thefts.
asserted
TRM → say → thefts
The money men work for a percentage, eventually exchanging crypto for yuan in Chinese bank accounts or access to payment cards.
asserted
men → work → cards
“There’s this entire parallel banking system that allows the Chinese to access hard currency overseas, and that’s the networks the North Koreans hide their activity in,” he said.
asserted
he → ’ → activity
White pointed out China’s restrictions on making overseas transfers has helped create demand for underground services.
asserted
restrictions → point → services
From China, the laundered money will likely be moved again.
asserted
money → launder → China
White pointed to Ramon Abbas, the Nigerian Instagram influencer known as Hushpuppi, known for flaunting luxury clothing and his enviable life in Dubai.
asserted
White → point → Dubai
“By night, he was working with all sorts of criminal elements including with North Korean hackers, to move money around to launder money and to facilitate fraud,” White said.
asserted
White → work → fraud
US prosecutors said Abbas supplied Romanian and Bulgarian bank-account details in a conspiracy to launder money from a Maltese bank heist attributed to North Korean hackers.
asserted
Abbas → say → hackers
Arrested in Dubai in June 2020, he was sentenced to 135 months in US prison in November 2022.
asserted
he → arrest → November
Carlsen sees more opportunity in targeting the money men than catching hackers protected by their home state.
asserted
Carlsen → see → state
“From several past recent hacks we’ve identified Hong Kong and China-based individuals that are handling the laundering,” he said.
asserted
he → identify → laundering
A 2023 prosecution accused North Korean banker Sim Hyon Sop of working with Chinese and Hong Kong traders to convert stolen crypto into dollar payments for goods for the regime, using Hong Kong front companies.
asserted
prosecution → accuse → companies
A separate indictment alleged Sim and Chinese intermediaries procured a Russian helicopter for North Korean customers in 2019.
asserted
Sim → allege → 2019
The contract listed a $300,000 price and delivery to a North Korean port.
asserted
contract → list → port
Carlsen said getting the funds back would only be possible with Chinese co-operation.
asserted
getting → say → operation
“If the Chinese government crack down on illicit banking, period, this would be basically impossible for the North Koreans,” he said.
asserted
he → crack → Koreans
“But if they even just narrowly target the individuals handling these thefts, the North Koreans would be stuck with crypto assets that they can’t sell.”
asserted
they → target → that
The Aporia
