State Incentives for Cyber Talent

North Korea has developed a robust system to recruit and train skilled hackers, offering them luxurious benefits as rewards for their efforts. Those who excel in this challenging field, such as participants in the recent Binance cryptocurrency hack that reportedly yielded $6.3 billion, are compensated with spacious living accommodations in the capital city of Pyongyang and generous financial awards.

Under the leadership of Kim Jong Un, the country has systematically created a cadre of elite hackers, selecting approximately 200 of the brightest children annually from middle schools to pursue advanced studies in computer engineering, according to defector testimonies and expert analyses.

The Evolution of North Korean Cyber Operations

The transformation of North Korean cyber capabilities has been significant over the past decade. Initially engaged in activities like illegal online gambling, these hackers have evolved into sophisticated operatives capable of executing high-profile cyber heists. “They are actually one of Kim Jong Un’s secret weapons,” stated Kim Heung-kwang, a former trainer of state-sponsored hackers who defected in 2004.

Kim emphasized that no other nation conducts such a systematic search for talented youth to groom them for cyber warfare, highlighting that the personal aspirations of these individuals are secondary to the state’s interests.

Insights into the Binance Hack

In the recent Binance incident, U.S. authorities attributed responsibility to North Korean hackers, specifically a group identified as “TraderTraitor.” Despite these allegations, North Korea has categorically denied involvement, claiming such accusations are politically motivated fabrications.

North Korea established its cyber unit in 1998, but it gained prominence under Kim Jong Un, who labeled cyber warfare as an essential component of national defense strategy, alongside its nuclear and missile programs.

Educational Pathways to Cybersecurity

Recruitment for this elite group begins at a remarkably young age, with students as young as 11 or 12 identified for further training in computer science. Top performers at the high school level are then eligible for selection to North Korea’s premier universities and, ultimately, military cyber units.

The scope of their education includes not only traditional subjects like advanced mathematics and foreign languages but also specialized training in cryptocurrency protocols and hardware reverse-engineering.

• Top talents may develop software for Western firms through remote jobs.
• Successful hackers can earn up to 30% of their heist’s proceeds, often receiving financial rewards in foreign currency.
• Successful operatives may also gain access to elite privileges, such as party membership and favorable marital prospects.

The Structure of North Korea’s Cyber Army

According to estimates from South Korea’s National Intelligence Service, approximately 8,400 individuals are involved in North Korea’s cyber warfare operations. While the state does not publicly celebrate their hacking achievements, it often highlights programming talent among students.

In 2015, North Korea unveiled Mirae Scientists Street, a project in which Kim Jong Un actively participated, further underscoring the state’s commitment to fostering technological talent.

Artificial Intelligence in Cyber Operations

Reports indicate that North Korean hackers employ artificial intelligence to enhance their covert activities. Interaction with remote technology jobs has revealed a highly organized structure resembling military discipline, where strict adherence to schedules is enforced.

Utilizing AI tools, operatives can generate resumes, forge documentation, and even manipulate job application processes to infiltrate foreign organizations. Binance disclosed that hackers leveraged a counterfeit job interview combined with malicious software hidden in an advertisement to breach their systems.

The Challenges and Pressures on IT Workers

Despite the apparent rewards, the lifestyle of North Korean hackers is demanding. Reports from former IT workers highlight the stress of meeting stringent financial targets and the consequences of failure, which can include severe repercussions. “The stress is extreme, and because of the psychological strain, people develop health problems they didn’t have before,” explained Nam Bada, executive director of PSCORE.

As the capabilities of North Korean cyber operatives continue to expand, analysts predict an increasing ambition in their targets. “We see more and more of them leaning towards what we call ‘big game hunting’—targeting larger organizations with significant financial reserves,” noted Alec Zebrick, a senior manager at Chainalysis.