North Korea's Digital Trojan Horse: Crypto Firms Infiltrated to Fund Nuclear Ambitions

Bitget App

Trade smarter

Bitget

News

Markets

North Korea's Digital Trojan Horse: Crypto Firms Infiltrated to Fund Nuclear Ambitions

Bitget-RWA2025/11/24 03:18

By:Bitget-RWA

- A U.S. intelligence officer warns North Korea has infiltrated 15-20% of global crypto firms to fund nuclear programs, exploiting remote workers in developing nations as intermediaries. - Pyongyang operatives use 20% earnings-sharing schemes to recruit freelancers on platforms like Upwork , installing malware to access U.S. infrastructure while evading sanctions. - The U.S. Treasury reports $3B stolen in crypto over three years, with North Korea leveraging stolen IP and embedded workers to maintain long-t

An intelligence officer from SEAL Team has disclosed that North Korean operatives have penetrated between 15% and 20% of cryptocurrency companies worldwide, a rate significantly exceeding earlier assumptions. This revelation, shared by Pablo Sabbatella, the founder of Web3 security firm opsek and a member of the Security Alliance, highlights the escalating danger posed by North Korea’s cyber-espionage activities. Sabbatella

cautioned that as many as 30% to 40% of job applicants

in the crypto sector could be North Korean agents, who use remote workers in less developed nations as proxies to circumvent sanctions and infiltrate vital systems.

Their methods are highly advanced. Due to global sanctions, North Korean hackers cannot apply for jobs directly, so they

enlist remote workers from countries such as Ukraine

and the Philippines to serve as go-betweens. These intermediaries are typically offered a 20% share of the income for providing their identities or accounts on freelance platforms like Upwork and Freelancer. Once inside, the North Korean agents deploy malware on the intermediaries’ devices to gain access to U.S. IP addresses and sensitive networks. Their consistent work ethic and lack of complaints

frequently help them retain their positions

for long durations.

The financial impact is substantial. The U.S. Treasury

disclosed that North Korean cybercriminals

have stolen more than $3 billion in digital assets over the last three years, channeling these funds into North Korea’s nuclear weapons initiatives. The extent of this infiltration goes beyond theft, involving embedded operatives who oversee infrastructure at leading crypto companies, presenting an ongoing threat to the sector’s safety.

Sabbatella pointed out the sector’s susceptibility, noting that many crypto founders have weak operational security (OPSEC). “Most are fully doxxed, fail to protect private keys adequately, and are easy targets for social engineering,” he stated

as reported

. To identify infiltrators, he recommended inquiring about opinions on Kim Jong Un, since North Korean agents are forbidden from speaking negatively about their leader

according to expert analysis

These disclosures come as tensions on the Korean Peninsula intensify. North Korea recently

denounced a defense pact between the U.S. and South Korea

that permits Seoul to develop nuclear-powered submarines, warning that this could ignite a regional arms race. The agreement, authorized by President Donald Trump during his latest visit to South Korea, has

provoked strong opposition from Pyongyang

, which sees it as a violation of denuclearization promises.

South Korea’s newly elected President, Lee Jae Myung, is confronted with the dual task of pursuing diplomatic engagement with Pyongyang while advancing military upgrades. Although he has halted anti-North broadcasts and reopened communication lines,

experts emphasize the importance

of strengthening cyber-intelligence and deepening cooperation with Japan. Public backing for South Korea’s own nuclear arsenal has

risen, with 76% of respondents

supporting the idea in a recent survey.

North Korea's Digital Trojan Horse: Crypto Firms Infiltrated to Fund Nuclear Ambitions image 0

The wider geopolitical environment is evolving. North Korea’s partnerships with Russia and China, which include a mutual defense agreement and troop deployments to Ukraine,

have strengthened its strategic leverage

. This cooperation with an “anti-Western bloc” in Northeast Asia

makes it harder

to isolate North Korea through sanctions alone.

As the cryptocurrency industry contends with North Korean infiltration, these events underscore the complex links between cybercrime, international politics, and economic conflict. For South Korea, the challenge lies in balancing deterrence with dialogue, all while protecting its technological and financial systems from threats posed by both state actors and independent groups.

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

PoolX: Earn new token airdrops

Lock your assets and earn 10%+ APR

Lock now!

- Australia introduces 2025 Digital Assets Framework Bill to regulate crypto exchanges and custody platforms under AFSL licensing and ASIC oversight. - The law creates two platform categories (transactional and custody) with exemptions for small operators and strict compliance penalties to prevent fraud. - Projected $24B annual economic gains aim to balance innovation with investor protection, aligning with global crypto regulatory trends like the U.S. GENIUS Act. - Industry welcomes safeguards but seeks s

Bitget-RWA•2025/11/27 09:20

Law Firms Take Action Against Corporations Amid Rising Investor Lawsuits

- U.S. law firms like Schall and Gross are leading class-action lawsuits against corporations for alleged investor misrepresentations across sectors. - Cases involve DexCom , MoonLake , Beyond Meat , and Stride , accusing them of concealing risks, overstating drug efficacy, and inflating enrollment figures. - Legal actions highlight SEC's intensified focus on biotech disclosures and edtech compliance, with deadlines set for investor claims by late 2025-2026. - These lawsuits emphasize corporate accountabil

Bitget-RWA•2025/11/27 09:00

Solana News Update: Solana ETFs Attract $476M While Death Cross and $120 Support Level Approach

- Solana ETFs attract $476M in 19 days, driven by Bitwise's 0.20% fee BSOL ETF with $424M inflows. - Technical indicators show a death cross and $120-$123 support test, with RSI at oversold 33 amid stagnant price action. - Institutional confidence grows via Franklin Templeton's fee-waiver strategy, contrasting Bitcoin/Ethereum ETF outflows of $5.34B. - Whale accumulation and on-chain growth hint at long-term buying, but $140 resistance remains unbroken despite ETF inflows.

Bitget-RWA•2025/11/27 09:00

Solana News Update: Solana ETFs Attract $476M While Death Cross and $120 Support Level Approach

XRP News Today: ADGM's Authorization of RLUSD Establishes International Standard for Institutional Stablecoin Compliance

- Ripple's RLUSD stablecoin gains FSRA approval for institutional use in Abu Dhabi's ADGM, effective November 27, 2025. - The $1.2B market-cap stablecoin features 1:1 USD reserves, third-party audits, and compliance with ADGM's transparency standards. - ADGM's approval aligns with its strategy to position Abu Dhabi as a global digital asset hub through regulated fiat-referenced tokens. - Ripple's Middle East expansion includes partnerships with UAE banks and regulatory licenses in Dubai, Bahrain, and Afric

Bitget-RWA•2025/11/27 09:00