A cybersecurity company said it has found software that appears to install code for mining cryptocurrency and sends any mined coins to a server at a North Korean university, the latest sign that North Korea might be searching for new ways to infuse its economy with cash.
The application, which was created on Dec. 24, uses host computers to mine a cryptocurrency called Monero. It then sends any coins to Kim Il-sung University in Pyongyang, cybersecurity firm AlienVault said.
“Cryptocurrencies may provide a financial lifeline to a country hit hard by sanctions, and as a result, universities in Pyongyang have shown a clear interest,” the California-based security firm said in a release, adding that the software “may be the most recent product of their endeavors.”
The company added a caveat that a North Korean server used in the code does not appear to be connected to the wider Internet, which could mean its inclusion is meant to trick observers into making a North Korean connection.
Kim Il-sung University did not immediately respond to requests for comment. Government officials representing North Korea at the UN were not immediately available for comment.
Others have flagged increasing signs of North Korean interest in cryptocurrencies and their underlying blockchain technology.
“With economic sanctions in place, cryptocurrencies are currently the best way to earn foreign currency in North Korea’s situation. It is hard to trace and can be laundered several times,” ESTsecurity chief analyst Mun Chong-hyun said.
Cryptocurrency watchers say technical details of Monero, the 13th-largest crypto asset in the world, according to www.coinmarketcap.com, make it more appealing than bitcoin to those who value secrecy.
Monero funds go to an unlinkable, one-time address generated with random numbers every time a payment is issued. That makes it less traceable than bitcoin, for which transactions can be linked to specific private addresses, cybersecurity experts said.
Marshal Swatt, an expert in blockchain technology and financial exchange, said cryptocurrencies’ independence from government regulation — and sanctions — make them logical choices for covert transactions.
Cybersecurity firm FireEye in a November blog post cited a series of North Korean activities against South Korean cryptocurrency targets such as exchanges.
“It should be no surprise that cryptocurrencies, as an emerging asset class, are becoming a target of interest by a regime that operates in many ways like a criminal enterprise,” analyst Luke McNamara wrote.
In early November, Federico Tenga, the Italian cofounder of bitcoin start-up Chainside, posted on Twitter photographs and comments on his visit to the Western-funded Pyongyang University of Science and Technology to lecture on bitcoin and blockchain.
“The lectures were at a quite basic level to give a general understanding of blockchain technologies, which are also very relevant to trade, supply chains and other e-business,” a university spokesman said.
“We believe this teaching can give the next generation of North Korean professionals additional concepts that may be valuable as they seek to develop their country,” the spokesman added. “We’re acutely aware of issues around sanctions, which we keep under regular review and take care to avoid any sensitive or proscribed areas.”
AlienVault’s report said one North Korean IP address, 175.45.178.19, has been active on bitcoin trading sites.
That is the same address used to control compromised Web servers in the 2014-2015 cyberattacks on South Korean energy, traffic, telecom, broadcasting, financial and political institutions, security firm AhnLab said.
The report also said that North Korean IP addresses have downloaded several episodes of the automotive TV series Top Gear and documentaries by the show’s former presenter James May.
KINGPIN: Marset allegedly laundered the proceeds of his drug enterprise by purchasing and sponsoring professional soccer teams and even put himself in the starting lineups Notorious Latin American narco trafficker Sebastian Marset, who eluded police for years, was handed over to US authorities after his arrest on Friday in Bolivia. Marset, a Uruguayan national who was on the US most-wanted list, was passed to agents of the US Drug Enforcement Administration at Santa Cruz airport in Bolivia, then put on a US airplane, Bolivian state television showed. “The arrest and deportation were carried out pursuant to a court order issued by the US justice system,” Bolivian Minister of Government Marco Antonio Oviedo told reporters. The alleged kingpin was arrested in an upscale neighborhood of Santa
ACTIONABLE ADVICE: The majority of chatbots tested provided guidance on weapons, tactics and target selections, with Perplexity and Meta AI deemed to be the least safe From school shootings to synagogue bombings, leading artificial intelligence (AI) chatbots helped researchers plot violent attacks, according to a study published on Wednesday that highlighted the technology’s potential for real-world harm. Researchers from the nonprofit watchdog Center for Countering Digital Hate and CNN posed as 13-year-old boys in the US and Ireland to test 10 chatbots, including ChatGPT, Google Gemini, Perplexity, Deepseek and Meta AI. Eight of the chatbots assisted the make-believe attackers in more than half the responses, providing advice on “locations to target” and “weapons to use” in an attack, the study said. The chatbots had become a “powerful accelerant for
FAKE NEWS? ‘When the government demands the press become a state mouthpiece under the threat of punishment, something has gone very wrong,’ a civic group said The top US broadcast regulator on Saturday threatened media outlets over negative coverage of the Middle East war, after US President Donald Trump slammed critical headlines from the “Fake News Media.” The US president since his first term has derided mainstream media as “fake news” and has sued major outlets over what he sees as unfair coverage. Brendan Carr, head of the US Federal Communications Commission — which oversees the nation’s radio, television and Internet media — said broadcasters risked losing their licenses over news coverage. “The law is clear. Broadcasters must operate in the public interest, and they will
SCANDAL: Other images discovered earlier show Andrew bent over a female and lying across the laps of a number of women, while Mandelson is pictured in his underpants A photograph of former British prince Andrew and veteran politician Peter Mandelson sitting in bathrobes alongside late sex offender Jeffrey Epstein was unearthed on Friday in previously published documents. The image is believed to be the first known photograph of the two men with Epstein. They are currently engulfed in scandal in the UK over their ties to their mutual friend. The undated photograph, first reported by ITV News, shows King Charles III’s disgraced brother and former British ambassador to the US sitting barefoot outside on a wooden deck. They appear to have mugs with a US flag on them