In late October 2026, hackers linked to North Korea executed a staggering theft of $6.3 billion from Binance, one of the world's largest cryptocurrency exchanges. This incident underscores the regime's growing capabilities in cyber warfare.
A Systematic Approach to Cyber Warfare
They are actually one of Kim Jong Un’s secret weapons.
Kim Heung-kwang, North Korean defector
North Korea’s cyber operations have evolved significantly over the years. The regime identifies and recruits talented young individuals, grooming them into highly skilled hackers. This initiative began over a decade ago, selecting top middle school students for advanced studies in technology.
- Around 150 to 200 students are chosen annually for their potential in computer science.
- Successful candidates may receive luxurious incentives, including apartments in Pyongyang.
The North Korean regime has established an extensive cyber unit since 1998, with its operations gaining prominence under Kim Jong Un. He has branded cyber warfare as essential to national defense, alongside traditional military capabilities.
Despite the demanding lifestyle of these hackers, which includes long hours and intense scrutiny, the regime offers substantial rewards for successful operations. For instance, hackers involved in major heists can earn a significant share of the stolen funds.
The Binance hack illustrates not only the audacity of North Korean cybercriminals but also their strategic importance to the state. Analysts indicate that state backing allows these hackers to operate without fear of repercussions, making them a persistent threat to global cybersecurity.
Experts warn that as North Korea's hackers continue to refine their techniques, they may increasingly target larger organizations, posing a growing risk to the international financial system.