Study: Lazarus hackers launder cryptocurrency through gift cards

A joint report by BAE Systems and SWIFT reveals North Korea's Lazarus Group is employing sophisticated methods to launder stolen cryptocurrency, including 'milking' funds through multiple exchanges, utilizing East Asian intermediaries to convert crypto to fiat via new bank accounts, and leveraging insiders at financial institutions to bypass scrutiny. The group also converts stolen bitcoins into prepaid gift cards and jewelry. This underscores the evolving and complex nature of state-sponsored crypto illicit finance, posing increased compliance and cybersecurity risks for financial institutions and crypto platforms.

Analysis

A joint report by BAE Systems and SWIFT reveals that North Korea's Lazarus Group is employing increasingly sophisticated and multi-faceted techniques to launder stolen cryptocurrency, presenting a significant threat to the digital asset and traditional financial ecosystems. The group's methods include 'milking' funds through a chain of different exchanges to obscure their origin, utilizing East Asian intermediaries to convert crypto to fiat via new bank accounts, and leveraging insiders at financial institutions to bypass regulatory scrutiny. Notably, the report highlights the conversion of stolen Bitcoin into non-traditional assets such as prepaid gift cards and jewelry, demonstrating an evolution in laundering tactics beyond purely digital methods. Furthermore, the group's active cyberattacks, targeting blockchain professionals via malicious job offers on LinkedIn and deploying trojanized trading applications, underscore the persistent and adaptive operational security risks facing the industry. These findings indicate a heightened level of systemic risk, increasing the compliance burden and potential for operational disruption for cryptocurrency exchanges, fintech platforms, and conventional banks.

Key Decisions for Investors

• Investors with exposure to cryptocurrency exchanges and digital asset platforms should intensify due-diligence on the companies' anti-money laundering (AML) and cybersecurity protocols, as sophisticated state-sponsored attacks increase regulatory and operational risks.
• Consider the potential for increased demand for specialized cybersecurity services; firms focused on blockchain analytics and insider threat detection may represent a strategic long opportunity given the threats detailed.
• Exercise caution with direct investments in the broader cryptocurrency market, as high-profile illicit activities could trigger more stringent global regulations, potentially impacting liquidity and investor sentiment.
• For positions in traditional banking and financial services, monitor for enhanced disclosures regarding internal controls and AML systems, as the documented use of insiders to facilitate laundering exposes a critical vulnerability.