LIVE
RedotPay Says It Will Defend Itself Against Binance LawsuitPutin Signs Russia's First Comprehensive Crypto LawPutin Signs Russian Law Regulating Bitcoin and CryptoCircle Shares Fall After EPS Beat, Net Income Gain, Revenue MissJapan FSA to Launch Crypto and Stablecoin Division by August 7: ReportThree Missouri Men Face 20 Years in Bitcoin Home Invasion PlotColdcard Wallet Hack Losses Reportedly Exceed $100 MillionCFTC Crypto Derivatives in 2026: Futures, Perpetuals, Margin, and Market OversightHow the SEC Classifies Crypto Assets and Tokenized SecuritiesCrypto Regulator Responsibilities by Product in 2026RedotPay Says It Will Defend Itself Against Binance LawsuitPutin Signs Russia's First Comprehensive Crypto LawPutin Signs Russian Law Regulating Bitcoin and CryptoCircle Shares Fall After EPS Beat, Net Income Gain, Revenue MissJapan FSA to Launch Crypto and Stablecoin Division by August 7: ReportThree Missouri Men Face 20 Years in Bitcoin Home Invasion PlotColdcard Wallet Hack Losses Reportedly Exceed $100 MillionCFTC Crypto Derivatives in 2026: Futures, Perpetuals, Margin, and Market OversightHow the SEC Classifies Crypto Assets and Tokenized SecuritiesCrypto Regulator Responsibilities by Product in 2026
Homepage/News/South Korean Exchange Hit by North Korean Phishing Attack
NEWS

South Korean Exchange Hit by North Korean Phishing Attack

BY Anca Florentis·1 MIN READ·MAY 31, 2019

North Korean hackers are at it again, this time for a phishing attempt on the users of the South Korean cryptocurrency exchange UpBit.

KEY FINDINGS - EVIDENCE LEVEL: MULTI-SOURCE
1Key sections mapped in this report
1Internal references connected to related coverage
3External source domains cited in the article
1 minEstimated time to read the full report

It was reported that earlier this week, the hackers sent a phishing email to UpBit users. The fake email urged users to provide additional customer information for a made-up sweepstakes’ payout held by the exchange.

According to security firm East Security, the email had a file attachment which claimed to have additional information regarding the payout but it actually installed the malware code when opened.

East Security has concluded that phishing email was sent by a North Korean hacking group known as Kim Soo-Ki.

This is not the first instance in which North Korea was involved in hacking their neighbor’s crypto exchanges.

It was revealed that North Korea succeeded in gathering $670 million in cryptocurrency in order to circumvent international trade sanctions.

But the North Korean government isn’t the only one to use cryptocurrencies to its advantage. The opposing political movement called Cheollima Civil Defense (CCD) were selling “post-liberation blockchain visas” in order to raise crypto funds to overthrow the dictatorship of Kim Jong-un.

Another infamous hacking group from North Korea is Lazarus. It was reported last October that the organization was the most profitable hacking group in the world, amassing $882 million worth of cryptocurrency by hacking exchanges over a period of two years.

It is not yet known how many have fallen to the phishing attack, but we hope that UpBit users have proceeded with caution and avoided responding to the scam.

Featured Image: VOX

SOURCE TRANSPARENCY
  • External Source - Referenced domain: upbit.com
  • External Source - Referenced domain: easternsecurity.net
  • External Source - Referenced domain: coindoo.com
  • Byline - Reported by Anca Florentis
  • Coverage Desk - Primary editorial category: News
  • Media Asset - Featured image served from the WordPress media library