LIVE
Ethereum Reached Record Q1 On-Chain Users and Transaction Volume: ReportMorgan Stanley's Ethereum, Solana ETFs Target 0.14% FeeCME Sues CFTC Over Kalshi Perpetual FuturesKraken Launches In-App Trading for 2,500+ Solana TokensBitcoin Rodney Pleads Guilty in $1.8B HyperFund Fraud CaseCME to Sue CFTC Over Approval of Crypto Perpetual FuturesWorld Datacentre Summit Philippines 2026 Opens Sponsorship, Speaking, and Exhibition OpportunitiesARK Invest Buys $18.4 Million in Coinbase Shares Across Three ETFsWorld Datacentre Summit Malaysia 2026 Opens Sponsorship, Speaking, and Exhibition OpportunitiesKentucky Files Lawsuits Against Kalshi and PolymarketEthereum Reached Record Q1 On-Chain Users and Transaction Volume: ReportMorgan Stanley's Ethereum, Solana ETFs Target 0.14% FeeCME Sues CFTC Over Kalshi Perpetual FuturesKraken Launches In-App Trading for 2,500+ Solana TokensBitcoin Rodney Pleads Guilty in $1.8B HyperFund Fraud CaseCME to Sue CFTC Over Approval of Crypto Perpetual FuturesWorld Datacentre Summit Philippines 2026 Opens Sponsorship, Speaking, and Exhibition OpportunitiesARK Invest Buys $18.4 Million in Coinbase Shares Across Three ETFsWorld Datacentre Summit Malaysia 2026 Opens Sponsorship, Speaking, and Exhibition OpportunitiesKentucky Files Lawsuits Against Kalshi and Polymarket
Homepage/News/South Korean Exchange Hit by North Korean Ph...
NEWS

South Korean Exchange Hit by North Korean Phishing Attack

BY Anca Florentis·1 MIN READ·MAY 31, 2019

North Korean phishing

North Korean hackers are at it again, this time for a phishing attempt on the users of the South Korean cryptocurrency exchange UpBit.

KEY FINDINGS - EVIDENCE LEVEL: MULTI-SOURCE
1Key sections mapped in this report
1Internal references connected to related coverage
3External source domains cited in the article
1 minEstimated time to read the full report

It was reported that earlier this week, the hackers sent a phishing email to UpBit users. The fake email urged users to provide additional customer information for a made-up sweepstakes’ payout held by the exchange.

According to security firm East Security, the email had a file attachment which claimed to have additional information regarding the payout but it actually installed the malware code when opened.

East Security has concluded that phishing email was sent by a North Korean hacking group known as Kim Soo-Ki.

This is not the first instance in which North Korea was involved in hacking their neighbor’s crypto exchanges.

It was revealed that North Korea succeeded in gathering $670 million in cryptocurrency in order to circumvent international trade sanctions.

But the North Korean government isn’t the only one to use cryptocurrencies to its advantage. The opposing political movement called Cheollima Civil Defense (CCD) were selling “post-liberation blockchain visas” in order to raise crypto funds to overthrow the dictatorship of Kim Jong-un.

Another infamous hacking group from North Korea is Lazarus. It was reported last October that the organization was the most profitable hacking group in the world, amassing $882 million worth of cryptocurrency by hacking exchanges over a period of two years.

It is not yet known how many have fallen to the phishing attack, but we hope that UpBit users have proceeded with caution and avoided responding to the scam.

Featured Image: VOX

SOURCE TRANSPARENCY
  • External Source - Referenced domain: upbit.com
  • External Source - Referenced domain: easternsecurity.net
  • External Source - Referenced domain: coindoo.com
  • Byline - Reported by Anca Florentis
  • Coverage Desk - Primary editorial category: News
  • Media Asset - Featured image served from the WordPress media library
South Korean Exchange Hit by North Korean Phishing Attack | TheCCPress