Reports describe North Korea’s cyber programme and alleged Binance heist

Technology · First reported 6 Nov, 07:17 · Updated 07:52

Image: Wikimedia Commons · Francis Matahum · CC BY-SA 4.0

Reports say North Korea selects students for cyber training and rewards successful operations, while the country denies responsibility for the $6.3 billion Binance hack.

Defectors and analysts say North Korea identifies about 150 to 200 students annually, sometimes as young as 11 or 12, for computer science studies; a few later enter the military’s cyber unit.
The FBI and Binance have blamed North Korea for a $6.3 billion Binance hack, while Pyongyang has denied responsibility; investigators have linked the suspected operation to TraderTraitor.
The reports describe rewards including foreign-currency payments, travel, and apartments in Pyongyang; one source says a military unit could receive up to 30% of a heist’s proceeds.
Sources cited in the reports describe long work hours, surveillance, cramped living conditions, and monthly earnings targets for North Korean technology workers.
Binance said attackers used a false job interview and software hidden in an advertisement to access staff computers, then used an internal AI tool to take control of systems.

Summary written by Lux AI from 3 articles

Key facts

Reported Binance theft: $6.3 billion; the reports attribute responsibility to North Korea based on statements by the FBI and Binance, while Pyongyang denies it.
Student selection: About 150–200 students per year, with selection sometimes starting at ages 11 or 12.
Cyber workforce estimate: South Korea’s National Intelligence Service estimated about 8,400 people in North Korea’s cyberwarfare operations in 2024.
Reported potential payment: Up to 30% of heist proceeds for the hackers’ military unit, according to a defector cited in the report.