North Korea’s cryptocurrency thefts fund illicit weapons, other military efforts, analysts say - Indo-Pacific Defense FORUM

North Korean hackers suspected of stealing $6.3 billion in cryptocurrency in late October 2026 are funding Pyongyang's illicit nuclear weapons and ballistic missile programs and other military activities, including support for Russia in its conflict with Ukraine, analysts say. The U.S. State Department described North Korean cybercrime as a global threat, stating that Pyongyang has "increasingly turned to cybercrime to circumvent international sanctions and fund its unlawful weapons of mass destruction and ballistic missile programs."

The North Korean hacking group TraderTraitor is accused of the theft from Binance, the world's largest cryptocurrency exchange. Binance said the hackers used fake job interviews and an AI-enabled tool, targeting a Binance engineer on LinkedIn and arranging a series of purported employment interviews that persuaded the engineer to download a fake assignment giving TraderTraitor access to the company's systems. North Korean hackers are believed to have stolen $13.5 billion in cryptocurrency in recent years.

Analysts link North Korea's military technology, including uncrewed systems, and its aid to Moscow to cyber theft and overseas worker schemes. Michael Barnhart, a researcher with cybersecurity firm DTEX, told Reuters that North Korea has sent troops, munitions and weapons components to Russia, all funded through the same system, making a crypto hack a national security issue. The British Broadcasting Corp. reported that Pyongyang recruits university students and sends them to hacker units overseen by the regime's intelligence agency.

North Korea also deploys IT workers who use false documents and stolen identities to obtain freelance work from targets in East Asia, Europe and North America, according to the Japanese and Republic of Korea foreign ministries and the U.S. State Department. The FBI said in October 2026 that these workers extort victims using "threats of physical violence to demand payments." The U.N. Security Council has adopted nine major resolutions sanctioning North Korea since 2006 over its nuclear and missile activities. In October 2026, Australia imposed financial sanctions and travel bans against individuals and entities facilitating the IT worker scheme, which the Australian Foreign Ministry said is aimed at disrupting the regime's illicit revenue-generating networks.