A South Korean crypto exchange operator has been handed a four-year prison sentence after being found guilty of leaking classified military information to North Korean hackers in return for Bitcoin payments. The court's ruling sheds light on a troubling case involving espionage, cryptocurrency, and national security breaches.
Bitcoin Bribe to Betray National Secrets
The convicted individual, identified only by their surname Lee, was accused of receiving 700 million won (approximately $480,000) worth of Bitcoin from a hacker suspected of being affiliated with North Korea. According to court documents, the hacker, codenamed “Boris,” used Telegram to establish contact with Lee in July 2021.
Boris reportedly sought to recruit South Korean military personnel capable of providing sensitive military data. Acting on Boris’s instructions, Lee approached an active-duty military officer, Captain Kim, to assist in the operation. In a further attempt to facilitate espionage, Lee provided Kim with a hidden camera disguised as a watch to secretly capture classified military documents.
Preventing a Potential National Security Crisis
The Seoul Central District Court’s presiding judge, Choi Kyung-seo, emphasized the severity of the crime. Judge Choi stated, “North Korea remains an anti-state entity committed to dismantling South Korea’s liberal democratic system. Lee’s actions, driven by personal and financial gain, posed a significant threat to the nation’s security.”
Prosecutors revealed that Lee had also tried to smuggle malicious software into a South Korean military base using a USB flash drive. However, authorities intercepted the device before it could be delivered to Kim. This intervention played a key role in preventing further breaches of national security.
Tracing the Bitcoin Trail
Investigators managed to trace the origin of the Bitcoin payments Lee received back to Boris, identified as a member of North Korea’s state-sponsored hacking group, the 110th Research Center. The United States Treasury Department sanctioned this Pyongyang-based group in May 2023, citing its involvement in various cyberattacks, including a 2009 DDoS attack targeting key South Korean government agencies.
A Broader Context of Espionage
This case is not the first instance of North Korea targeting South Korea’s military using unconventional means. Last year, another court sentenced a group of loan sharks who accepted military passwords from soldiers as collateral. These soldiers were reportedly borrowing funds to invest in cryptocurrencies, highlighting the increasing intersection between financial desperation, digital assets, and national security vulnerabilities.
A Stark Warning
Beyond the prison sentence, Lee has been barred from working in similar roles for an additional four years. The ruling serves as a cautionary tale about the risks posed by the misuse of cryptocurrency and the persistent threat of North Korean cyber-espionage activities.
This case underscores the critical need for vigilance against evolving threats to national security, especially as cryptocurrency continues to play a pivotal role in global financial and cybercrime landscapes.