That Asian meal you eat on holidays could launder money for North Korea
(2024/03/25)
- Reference: 1711348328
- News link: https://www.theregister.co.uk/2024/03/25/un_north_korea_report/
- Source link:
If you dine out at an Asian restaurant on your next holiday, the United Nations thinks your meal could help North Korea to launder money.
That bitter tidbit is detailed by the United Nations Panel of Experts dedicated to assessing the Security Council's sanctions against The Democratic People's Republic of Korea (DPRK, aka North Korea) in its [1]annual report [PDF].
The report finds that North-Korea-run eateries can be found in China, Laos, Thailand, and Russia. Not all offer Korean food – some specialize in Japanese or other cuisines. China alone houses 65 such restaurants.
[2]
Some of the eateries are clearly staffed by North Koreans, whose lousy Mandarin is a giveaway in China. Others have only a couple of North Koreans on staff. Few of the DPRK citizens in the food trade have the correct visa – or a visa at all.
[3]
[4]
We mention the restaurants because the UN reckons they collectively help the DPRK to launder $700 million a year. Much of the rest of the report details where that cash comes from: the many [5]crypto heists and [6]freelance tech workers who funnel their wages home to Pyongyang, maybe after first using the privileged access they gain working on your systems to do nasty things.
The UN report relies on infosec specialists for its assertions about DPRK infosec activities, and gives them credence by revealing the Security council is investigating "58 suspected cyber attacks by the Democratic People's Republic of Korea on cryptocurrency-related companies between 2017 and 2023, valued at approximately $3 billion, which reportedly help to fund the country's development of weapons of mass destruction."
[7]
Seventeen of those attacks took place in 2023 – a year that the UN thinks saw North Korea get its hands on $750 million of other people's crypto.
[8]It's 2024 and North Korea's Kimsuky gang is exploiting Windows Help files
[9]Seoul accuses North Korea of stealing southern chipmakers' designs
[10]North Korea running malware-laden gambling websites as-a-service
[11]Eyeing China, US may require clouds to report when foreign actors rent kit to build AI models
The Expert Panel thinks some of the DPRK's activities could be curtailed with stricter compliance activities and international info-sharing.
Among its suggestions are some basic infosec practices – like adopting multi-factor authentication and zero-trust principles.
The Panel also wants UN member states to "consider establishing systems for reporting and sharing Democratic People's Republic of Korea-related cyber threat information with the cryptocurrency industry and private sector." The latter have been told it's a good idea to "review information released by Member States and cyber security companies regarding Democratic People's Republic of Korea-linked virtual currency addresses and be vigilant in guarding against transactions directly with, or derived from, those addresses."
Another UN target is "all cryptocurrency platforms and protocols – including decentralized and centralized exchanges, bridges, instant exchange services, mixers and privacy protocols" – as the Panel feels that if those players "implement appropriate anti-money-laundering and know-your-customer programmes and establish procedures and enhanced monitoring and detection mechanisms" they're a chance of preventing the DPRK's crypto scheme from succeeding.
[12]
While that would be a welcome outcome, the report also details myriad other schemes North Korea uses to evade sanctions – including laundering the identity of ships used to bust sanctions, joint ventures companies that help it to move money, and many more besides.
Indeed, the report runs to 615 pages – such is the extent of the DPRK's sanctions-evading activities. ®
Get our [13]Tech Resources
[1] https://documents.un.org/doc/undoc/gen/n24/032/68/pdf/n2403268.pdf?token=l8UvCeJazl9wFvt7Cr&fe=true
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZgFZSgx0Q9TqCtJ2rc11qQAAAII&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZgFZSgx0Q9TqCtJ2rc11qQAAAII&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZgFZSgx0Q9TqCtJ2rc11qQAAAII&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://www.theregister.com/2023/08/23/fbi_dprk_cyber_crooks/
[6] https://www.theregister.com/2023/10/19/north_korea_fake_freelance_avoidance/
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZgFZSgx0Q9TqCtJ2rc11qQAAAII&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://www.theregister.com/2024/03/21/kimsuky_chm_file_campaign/
[9] https://www.theregister.com/2024/03/04/north_korea_hacking_chipmakers/
[10] https://www.theregister.com/2024/02/15/north_korea_turns_to_designing/
[11] https://www.theregister.com/2024/01/29/us_raimondo_ai_cloud_kyc/
[12] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZgFZSgx0Q9TqCtJ2rc11qQAAAII&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[13] https://whitepapers.theregister.com/
That bitter tidbit is detailed by the United Nations Panel of Experts dedicated to assessing the Security Council's sanctions against The Democratic People's Republic of Korea (DPRK, aka North Korea) in its [1]annual report [PDF].
The report finds that North-Korea-run eateries can be found in China, Laos, Thailand, and Russia. Not all offer Korean food – some specialize in Japanese or other cuisines. China alone houses 65 such restaurants.
[2]
Some of the eateries are clearly staffed by North Koreans, whose lousy Mandarin is a giveaway in China. Others have only a couple of North Koreans on staff. Few of the DPRK citizens in the food trade have the correct visa – or a visa at all.
[3]
[4]
We mention the restaurants because the UN reckons they collectively help the DPRK to launder $700 million a year. Much of the rest of the report details where that cash comes from: the many [5]crypto heists and [6]freelance tech workers who funnel their wages home to Pyongyang, maybe after first using the privileged access they gain working on your systems to do nasty things.
The UN report relies on infosec specialists for its assertions about DPRK infosec activities, and gives them credence by revealing the Security council is investigating "58 suspected cyber attacks by the Democratic People's Republic of Korea on cryptocurrency-related companies between 2017 and 2023, valued at approximately $3 billion, which reportedly help to fund the country's development of weapons of mass destruction."
[7]
Seventeen of those attacks took place in 2023 – a year that the UN thinks saw North Korea get its hands on $750 million of other people's crypto.
[8]It's 2024 and North Korea's Kimsuky gang is exploiting Windows Help files
[9]Seoul accuses North Korea of stealing southern chipmakers' designs
[10]North Korea running malware-laden gambling websites as-a-service
[11]Eyeing China, US may require clouds to report when foreign actors rent kit to build AI models
The Expert Panel thinks some of the DPRK's activities could be curtailed with stricter compliance activities and international info-sharing.
Among its suggestions are some basic infosec practices – like adopting multi-factor authentication and zero-trust principles.
The Panel also wants UN member states to "consider establishing systems for reporting and sharing Democratic People's Republic of Korea-related cyber threat information with the cryptocurrency industry and private sector." The latter have been told it's a good idea to "review information released by Member States and cyber security companies regarding Democratic People's Republic of Korea-linked virtual currency addresses and be vigilant in guarding against transactions directly with, or derived from, those addresses."
Another UN target is "all cryptocurrency platforms and protocols – including decentralized and centralized exchanges, bridges, instant exchange services, mixers and privacy protocols" – as the Panel feels that if those players "implement appropriate anti-money-laundering and know-your-customer programmes and establish procedures and enhanced monitoring and detection mechanisms" they're a chance of preventing the DPRK's crypto scheme from succeeding.
[12]
While that would be a welcome outcome, the report also details myriad other schemes North Korea uses to evade sanctions – including laundering the identity of ships used to bust sanctions, joint ventures companies that help it to move money, and many more besides.
Indeed, the report runs to 615 pages – such is the extent of the DPRK's sanctions-evading activities. ®
Get our [13]Tech Resources
[1] https://documents.un.org/doc/undoc/gen/n24/032/68/pdf/n2403268.pdf?token=l8UvCeJazl9wFvt7Cr&fe=true
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZgFZSgx0Q9TqCtJ2rc11qQAAAII&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZgFZSgx0Q9TqCtJ2rc11qQAAAII&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZgFZSgx0Q9TqCtJ2rc11qQAAAII&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://www.theregister.com/2023/08/23/fbi_dprk_cyber_crooks/
[6] https://www.theregister.com/2023/10/19/north_korea_fake_freelance_avoidance/
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZgFZSgx0Q9TqCtJ2rc11qQAAAII&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://www.theregister.com/2024/03/21/kimsuky_chm_file_campaign/
[9] https://www.theregister.com/2024/03/04/north_korea_hacking_chipmakers/
[10] https://www.theregister.com/2024/02/15/north_korea_turns_to_designing/
[11] https://www.theregister.com/2024/01/29/us_raimondo_ai_cloud_kyc/
[12] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZgFZSgx0Q9TqCtJ2rc11qQAAAII&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[13] https://whitepapers.theregister.com/
Triggerfish
I mean there is an official NK restaurant chain "Pyongang" in Vietnam, Thailand etc.
Which may or may not be selinng dodgy software as well.
https://www.google.com/amp/s/amp.cnn.com/cnn/2019/05/18/asia/hanoi-north-korea-restaurant-facial-recognition-software-intl/index.html
But as a percentage market wise I'd wonder what your odds are of actually hitting an undercover one. There is a huge amount of places to eat in these countries. Chances are low your going to hit many.
If you curtail all of their opportunities to do legitimate business, the only business they can do is illegitimate.