A cybersecurity company said it has found software that appears to install code for mining cryptocurrency and sends any mined coins to a server at a North Korean university, the latest sign that North Korea might be searching for new ways to infuse its economy with cash.
The application, which was created on Dec. 24, uses host computers to mine a cryptocurrency called Monero. It then sends any coins to Kim Il-sung University in Pyongyang, cybersecurity firm AlienVault said.
“Cryptocurrencies may provide a financial lifeline to a country hit hard by sanctions, and as a result, universities in Pyongyang have shown a clear interest,” the California-based security firm said in a release, adding that the software “may be the most recent product of their endeavors.”
The company added a caveat that a North Korean server used in the code does not appear to be connected to the wider Internet, which could mean its inclusion is meant to trick observers into making a North Korean connection.
Kim Il-sung University did not immediately respond to requests for comment. Government officials representing North Korea at the UN were not immediately available for comment.
Others have flagged increasing signs of North Korean interest in cryptocurrencies and their underlying blockchain technology.
“With economic sanctions in place, cryptocurrencies are currently the best way to earn foreign currency in North Korea’s situation. It is hard to trace and can be laundered several times,” ESTsecurity chief analyst Mun Chong-hyun said.
Cryptocurrency watchers say technical details of Monero, the 13th-largest crypto asset in the world, according to www.coinmarketcap.com, make it more appealing than bitcoin to those who value secrecy.
Monero funds go to an unlinkable, one-time address generated with random numbers every time a payment is issued. That makes it less traceable than bitcoin, for which transactions can be linked to specific private addresses, cybersecurity experts said.
Marshal Swatt, an expert in blockchain technology and financial exchange, said cryptocurrencies’ independence from government regulation — and sanctions — make them logical choices for covert transactions.
Cybersecurity firm FireEye in a November blog post cited a series of North Korean activities against South Korean cryptocurrency targets such as exchanges.
“It should be no surprise that cryptocurrencies, as an emerging asset class, are becoming a target of interest by a regime that operates in many ways like a criminal enterprise,” analyst Luke McNamara wrote.
In early November, Federico Tenga, the Italian cofounder of bitcoin start-up Chainside, posted on Twitter photographs and comments on his visit to the Western-funded Pyongyang University of Science and Technology to lecture on bitcoin and blockchain.
“The lectures were at a quite basic level to give a general understanding of blockchain technologies, which are also very relevant to trade, supply chains and other e-business,” a university spokesman said.
“We believe this teaching can give the next generation of North Korean professionals additional concepts that may be valuable as they seek to develop their country,” the spokesman added. “We’re acutely aware of issues around sanctions, which we keep under regular review and take care to avoid any sensitive or proscribed areas.”
AlienVault’s report said one North Korean IP address, 175.45.178.19, has been active on bitcoin trading sites.
That is the same address used to control compromised Web servers in the 2014-2015 cyberattacks on South Korean energy, traffic, telecom, broadcasting, financial and political institutions, security firm AhnLab said.
The report also said that North Korean IP addresses have downloaded several episodes of the automotive TV series Top Gear and documentaries by the show’s former presenter James May.
Republican US lawmakers on Friday criticized US President Joe Biden’s administration after sanctioned Chinese telecoms equipment giant Huawei unveiled a laptop this week powered by an Intel artificial intelligence (AI) chip. The US placed Huawei on a trade restriction list in 2019 for contravening Iran sanctions, part of a broader effort to hobble Beijing’s technological advances. Placement on the list means the company’s suppliers have to seek a special, difficult-to-obtain license before shipping to it. One such license, issued by then-US president Donald Trump’s administration, has allowed Intel to ship central processors to Huawei for use in laptops since 2020. China hardliners
A top Vietnamese property tycoon was on Thursday sentenced to death in one of the biggest corruption cases in history, with an estimated US$27 billion in damages. A panel of three hand-picked jurors and two judges rejected all defense arguments by Truong My Lan, chair of major developer Van Thinh Phat, who was found guilty of swindling cash from Saigon Commercial Bank (SCB) over a decade. “The defendant’s actions ... eroded people’s trust in the leadership of the [Communist] Party and state,” read the verdict at the trial in Ho Chi Minh City. After the five-week trial, 85 others were also sentenced on
Conjoined twins Lori and George Schappell, who pursued separate careers, interests and relationships during lives that defied medical expectations, died this month in Pennsylvania, funeral home officials said. They were 62. The twins, listed by Guinness World Records as the oldest living conjoined twins, died on April 7 at the Hospital of the University of Pennsylvania, obituaries posted by Leibensperger Funeral Homes of Hamburg said. The cause of death was not detailed. “When we were born, the doctors didn’t think we’d make 30, but we proved them wrong,” Lori said in an interview when they turned 50, the Philadelphia Inquirer reported. The
RAMPAGE: A Palestinian man was left dead after dozens of Israeli settlers searching for a missing 14-year-old boy stormed a village in the Israeli-occupied West Bank US President Joe Biden on Friday said he expected Iran to attack Israel “sooner, rather than later” and warned Tehran not to proceed. Asked by reporters about his message to Iran, Biden simply said: “Don’t,” underscoring Washington’s commitment to defend Israel. “We are devoted to the defense of Israel. We will support Israel. We will help defend Israel and Iran will not succeed,” he said. Biden said he would not divulge secure information, but said his expectation was that an attack could come “sooner, rather than later.” Israel braced on Friday for an attack by Iran or its proxies as warnings grew of