{
  "id": 17322534,
  "title": "Why North Korea's 'elite' hackers are the prime suspect in major Binance hack",
  "url": "https://urgent.news/2026/10/31/why-north-koreas-elite-hackers-are-the-prime-suspect-in-major-binance",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-31T02:12:19.000Z",
  "source": {
    "name": "BBC Technology",
    "slug": "bbc-technology",
    "url": "https://www.bbc.co.uk/news/articles/ck9dz3v7z7v3o?at_medium=RSS&at_campaign=rss"
  },
  "original_language": "en",
  "account": "Two prominent blockchain analysis firms have concluded that a North Korean state-backed hacker group, known as the Lazarus Group or TraderTraitor, is the most likely perpetrator behind the $6.3 billion breach of Binance, the world's leading cryptocurrency exchange. This latest incident is among numerous suspected cyber attacks linked to North Korea, a country notorious for its restricted internet access and economic struggles. Experts attribute the nation's financial woes to its reliance on cybercrime, a claim North Korea has repeatedly denied.\n\nOne of the most notable cyber attacks attributed to North Korea occurred in 2014, targeting Sony Pictures for creating the film \"The Interview,\" which depicted a plot to assassinate Kim Jong Un. The resulting cyber attack exposed sensitive internal emails of the studio. More recently, in 2022, North Korean hackers were suspected of stealing $620 million worth of cryptocurrency.\n\nThe FBI has formally accused North Korea of participating in illicit cybercrime and virtual asset theft activities, including converting stolen assets into Bitcoin and other digital currencies to eventually turn them into hard currency. Analysts believe North Korean hackers, particularly those in the Lazarus Group, employ various techniques to launder and disperse illicit funds.\n\nIn the recent Binance hack, North Korean agents allegedly exploited a special authorization to turn a hot wallet, which is connected to the internet, into an automated system that moved funds to the attackers. TRM Labs explained that it is probable the attackers gained access to Binance's hot wallet signing system as part of their scheme. Binance has not explicitly acknowledged the connection between the incident and North Korea, but CEO Richard Teng revealed that the breach was more extensive than initially believed. Approximately 80% of the stolen assets have been recovered, but the remaining portion remains unaccounted for. If the accusations are accurate, this record-breaking heist demonstrates the growing sophistication of suspected North Korean hackers and the increasing capabilities of their hacking tools, potentially enhanced by the use of artificial intelligence.",
  "summary": "If the accusations are true, the record-making heist shows how powerful suspected North Korean hackers have become.",
  "key_points": [
    "North Korean state-backed Lazarus Group suspected in $6.3B Binance hack",
    "Lazarus Group linked to multiple cyber attacks against North Korea",
    "FBI accuses North Korea of illicit cybercrime and virtual asset theft"
  ],
  "editors_take": "The suspected involvement of North Korean state-backed hackers underscores a growing trend of using sophisticated cyberattacks to bypass exchange security systems and generate hard currency for a sanctioned nation.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}