The Billion-Dollar Cyber Thief: Unmasking Park Jin Hyok
In the world of cryptocurrency and cybersecurity, few names have garnered as much attention as Park Jin Hyok, a North Korean programmer accused of leading some of the most high-profile cyber heists of the past decade. Hyok, allegedly backed by the North Korean government, has been linked to the notorious Lazarus Group, a collective infamous for orchestrating significant cyber heists.
A Hacker Raised by the State
Allegedly backed by the North Korean government, the Lazarus Group has orchestrated some of the most devastating cyberattacks in history, targeting financial institutions and critical infrastructure worldwide. Park Jin Hyok, a graduate of Kim Chaek University of Technology in Pyongyang, began his career at Chosun Expo, a government-linked IT company operating in both North Korea and China.
Believed to be a front for state-sponsored cyber operations, this company served as a recruitment ground for elite programmers tasked with executing cyberattacks under the directive of North Koreaβs military intelligence unit, Lab 110. Hyokβs name first entered the international spotlight following the infamous Sony Pictures hack in 2014.
Making of a Cybercriminal Legend
The groupβs foray into crypto crime gained widespread attention in 2017 β the same year Park was first identified as a key figure in Lazarus. That year, a series of cyberattacks on South Korean exchanges siphoned millions from trading platforms, including the now-defunct Youbit, which was forced into bankruptcy after losing 17% of its assets in a single breach.
Some of the notable hacks linked to Lazarus include:
- The 2018 Coincheck hack, where the group pulled off a $530 million theft from the Japanese exchange.
- The 2022 Ronin Network breach, one of the most damaging in crypto history, saw $600 million drained from Axie Infinityβs sidechain.
- The 2024 WazirX hack, where Lazarus struck again, siphoning $234 million from the Indian exchange.
And now, the Bybit hack has revived the same pattern β this time on an even grander scale. The breach, which occurred on February 21, saw hackers infiltrate the companyβs Ethereum cold wallet, making off with approximately $1.5 billion in digital assets.
The World is Losing the Cyber War β And Hyok Knows It
Lazarus Groupβs cyber warfare has evolved into a well-orchestrated playbook that blends deception, infiltration, and precision laundering. Their ability to weaponize human psychology has been one of their most formidable advantages, allowing them to bypass even the most sophisticated security measures.
According to Chainalysis, North Korea-affiliated hackers stole $660.50 million across 20 incidents in 2023. In 2024, this number skyrocketed to $1.34 billion stolen across 47 incidents, marking an over 102% increase. These figures account for 61% of all crypto stolen that year, and Lazarus Group was responsible for nearly all large-scale exploits above $100 million.
As the world grapples with the growing threat of cybercrime, one thing is clear: Park Jin Hyok and the Lazarus Group will continue to be a major force to be reckoned with. Stay informed about the latest developments in cryptocurrency and cybersecurity with Global Crypto News.
βThe real question isnβt just how they pulled it off β but how much longer the world can keep up before the next billion vanishes into the digital void.β