International efforts to impose additional sanctions on North Korean IT personnel and cyber revenue networks are underway, yet South Korea has not designated any new targets for independent cyber sanctions in nearly two years.
According to the Ministry of Foreign Affairs on November 2, the last time the government designated a target for cyber sanctions was on December 30, 2024, when it added 15 North Korean IT personnel and one related organization to the sanctions list. Since then, there have been no new designations for 22 months. Overall independent sanctions against North Korea have not been updated since May of last year, and there have been no new designations since the current administration took office.
In contrast, major countries are expanding their sanctions against North Korea's cyber revenue networks. On October 28, the U.S. Treasury Department sanctioned 10 individuals and one organization linked to an IT personnel network that disguised employment with U.S. companies to fund North Korea's weapons development. Australia also designated two individuals and two organizations involved in North Korea's deceptive employment and IT revenue generation on October 23.
These actions come as North Korea's cyber threats have escalated significantly. The FBI announced on October 31 that North Korea had stolen over $6 billion in cryptocurrency from Binance, the world's largest cryptocurrency exchange. This amount is equivalent to approximately 8 trillion won. There have also been numerous suspected cases of domestic victims. The National Police Agency's Security Investigation Bureau is currently investigating a case where North Korean IT personnel concealed their identities to gain employment with domestic private companies.
A large-scale access attempt from North Korean IP addresses targeting the financial sector has also been detected. Financial authorities reported on October 21 that they identified 4,404,101 scanning attempts from North Korean IP addresses aimed at financial institutions and cryptocurrency exchanges, prompting security checks for related organizations.
The South Korean government is also strengthening international cooperation to address North Korea's cyber security threats. On October 28, it participated in a joint statement supporting the sanctions imposed by the U.S. and Australia. In July, it issued a joint advisory with the U.S., Japan, and the U.K. to inform about North Korean IT personnel's deceptive employment methods and is operating a working group focused on countering North Korean cyber threats with the U.S. and Japan.
However, despite being a participant in the Multinational Sanctions Monitoring Team (MSMT) and a signatory to the joint statement, South Korea has not moved to designate any new sanctions targets.
Concerns are growing that delays in updating the sanctions list could hinder domestic companies and financial institutions from effectively identifying North Korean activities, as North Korean IT personnel often change their identities and affiliations to disguise employment with foreign companies and use proxy accounts and cryptocurrencies.
Particularly, as North Korea's cyber revenue generation expands and major countries continue to update their sanctions lists, there are voices suggesting that inter-agency coordination within South Korea is taking too long, limiting the country to merely supporting international follow-up actions.
The government considered independent cyber sanctions against North Korea in response to a landmine explosion incident in the DMZ last month. However, Unification Minister Jeong Dong-young expressed a negative stance during a National Assembly audit, stating, "The Unification Ministry fundamentally believes that sanctions are not the solution." While the Foreign Ministry is reviewing the necessity of sanctions, discussions have remained at the consultation stage for over a month due to the Unification Ministry's cautious approach.
Given that the Foreign Ministry has indicated it is reviewing additional cyber sanctions, there are expectations that the recent Binance hacking incident could accelerate discussions on sanctions against North Korea.
A Foreign Ministry official stated regarding the impact of the Binance hacking incident on discussions of additional independent sanctions, "It is difficult to make predictions, but we are responding to cyber hacking separately from the DMZ landmine explosion incident and have been reviewing additional measures."
* This article has been translated by AI.
Copyright ⓒ Aju Press All rights reserved.