SEOUL — The notorious North Korean hacker Park Jin-hyuk has drawn renewed global attention in the wake of a massive cryptocurrency exploit that drained roughly $6.3 billion (approx. 8.4 trillion won) from the world’s leading digital asset platform, Binance.

Park, whose name has remained on the Federal Bureau of Investigation’s (FBI) cybercrime most-wanted list for eight years, was highlighted by the French crypto publication CoinTribune following the recent security breach. Despite the FBI issuing an arrest warrant in 2018 and publishing his alias, birth year, and facial photographs, authorities have yet to apprehend him.

On October 31, the FBI officially attributed the latest incident to "TraderTraitor," a specialized North Korean cyber warfare unit targeting financial institutions and cryptocurrency platforms to secure funding for the regime. The unit is closely linked to the Reconnaissance General Bureau’s notorious "Lazarus Group." However, the FBI has not explicitly confirmed Park's direct involvement in the Binance incident.

A Long History of Cyberattacks

Park first gained international notoriety in September 2018 when the U.S. Department of Justice unsealed a criminal complaint accusing him of orchestrating several high-profile cyberattacks. According to American investigators, Park studied at Kim Chaek University of Technology in Pyongyang and worked as a programmer for Chosun Expo Joint Venture—a front company allegedly supporting North Korean state-sponsored cyber operations. He is also known to have operated out of Dalian, Liaoning Province, China.

His alleged extensive rap sheet includes:

The 2014 Sony Pictures Hack: An aggressive retaliation cyberattack launched ahead of the release of The Interview, a satirical film depicting the assassination of North Korean leader Kim Jong Un. Hackers compromised corporate networks, leaked unreleased films and employee data, and destroyed internal systems.
The 2014–2016 Bank Heists: Involvement in orchestrating the theft of $81 million from the Bangladesh Central Bank.
The 2017 WannaCry Ransomware Outage: Participation in deploying the devastating ransomware attack that paralyzed hospitals, corporations, and public infrastructure across the globe by encrypting data and demanding cryptocurrency ransoms.
Lockheed Martin Targeting: Failed attempts between 2016 and 2017 to breach the defense contractor via malicious phishing emails.

Denials from Pyongyang

U.S. Treasury Department records indicate Park was born in 1984—with August 15 and October 18 listed as potential birth dates—and used several aliases, including David Anderson, Henry Watson, and Kim Hyun-woo, alongside specific passport numbers.

Despite mounting international evidence, North Korea has consistently denied these allegations. In September 2018, a North Korean Foreign Ministry official claimed Park was a "fictitious entity." Most recently, Kim Yo-jong, deputy department director of the Workers' Party of Korea, strongly criticized the FBI's latest announcements, dismissing the accusations as baseless attempts by the U.S. to tie international cyber incidents to Pyongyang.

[Copyright (c) Global Economic Times. All Rights Reserved.]