Foreign News
North Korean hackers cash out hundreds of millions from $1.5bn ByBit hack
Hackers thought to be working for the North Korean regime have successfully cashed out at least $300m (£232m) of their record-breaking $1.5bn crypto heist.
The criminals, known as Lazarus Group, swiped the huge haul of digital tokens in a hack on crypto exchange ByBit two weeks ago.
Since then, it’s been a cat-and-mouse game to track and block the hackers from successfully converting the crypto into usable cash.
Experts say the infamous hacking team is working nearly 24 hours a day – potentially funnelling the money into the regime’s military development.
“Every minute matters for the hackers who are trying to confuse the money trail and they are extremely sophisticated in what they’re doing,” says Dr Tom Robinson, co-founder of crypto investigators Elliptic.
Out of all the criminal actors involved in crypto currency, North Korea is the best at laundering crypto, Dr Robinson says.
“I imagine they have an entire room of people doing this using automated tools and years of experience. We can also see from their activity that they only take a few hours break each day, possibly working in shifts to get the crypto turned into cash.”
Elliptic’s analysis tallies with ByBit, which says that 20% of the funds have now “gone dark”, meaning it is unlikely to ever be recovered.
The US and allies accuse the North Koreans of carrying out dozens of hacks in recent years to fund the regime’s military and nuclear development.
On 21 February the criminals hacked one of ByBit’s suppliers to secretly alter the digital wallet address that 401,000 Ethereum crypto coins were being sent to.
ByBit thought it was transferring the funds to its own digital wallet, but instead sent it all to the hackers.

Ben Zhou, the CEO of ByBit, assured customers that none of their funds had been taken.
The firm has since replenished the stolen coins with loans from investors, but is in Zhou’s words “waging war on Lazarus”.
ByBit’s Lazarus Bounty programme is encouraging members of the public to trace the stolen funds and get them frozen where possible.
All crypto transactions are displayed on a public blockchain, so it’s possible to track the money as it’s moved around by the Lazarus Group.
If the hackers try to use a mainstream crypto service to attempt to turn the coins into normal money like dollars, the crypto coins can be frozen by the company if they think they are linked to crime.
So far 20 people have shared more than $4m in rewards for successfully identifying $40m of the stolen money and alerting crypto firms to block transfers.
But experts are downbeat about the chances of the rest of the funds being recoverable, given the North Korean expertise in hacking and laundering the money.
“North Korea is a very closed system and closed economy so they created a successful industry for hacking and laundering and they don’t care about the negative impression of cyber crime,” Dr Dorit Dor from cyber security company Check Point said.
Another problem is that not all crypto companies are as willing to help as others.
Crypto exchange eXch is being accused by ByBit and others of not stopping the criminals cashing out.
More than $90m has been successfully funnelled through this exchange.
But over email the elusive owner of eXch – Johann Roberts – disputed that.
He admits they didn’t initially stop the funds, as his company is in a long-running dispute with ByBit, and he says his team wasn’t sure the coins were definitely from the hack.
He says he is now co-operating, but argues that mainstream companies that identify crypto customers are abandoning the private and anonymous benefits of crypto currency.

North Korea has never admitted being behind the Lazarus Group, but is thought to be the only country in the world using its hacking powers for financial gain.
Previously the Lazarus Group hackers targeted banks, but have in the last five years specialised in attacking cryptocurrency companies.
The industry is less well protected with fewer mechanisms in place to stop them laundering the funds.
Recent hacks linked to North Korea include:
- The 2019 hack on UpBit for $41m
- The $275m theft of crypto from exchange KuCoin (most of the funds were recovered)
- The 2022 Ronin Bridge attack which saw hackers make off with $600m in crypto
- Approximately $100m in crypto was stolen in an attack on Atomic Wallet in 2023
In 2020, the US added North Koreans accused of being part of the Lazarus Group to its Cyber Most Wanted list. But the chances of the individuals ever being arrested are extremely slim unless they leave their country.
[BBC]
Foreign News
Russia sends navy to guard oil tanker being pursued by US forces
Russia has reportedly deployed a submarine and other vessels to escort an oil tanker – which is also being pursued by US forces – across the Atlantic.
The ship, currently between Iceland and the British Isles, has been accused of breaking US sanctions and shipping Iranian oil. It has historically transported Venezuelan crude oil but is reporting to be empty at the moment.
Previously named Bella 1, its name has been changed to Marinera and it has also reportedly been reflagged from a Guyanese to a Russian vessel.
President Donald Trump said last month that he was ordering a ‘blockade’ of sanctioned oil tankers entering and leaving Venezuela, a move the government there described as “theft”
Two US officials have confirmed to CBS News, the BBC’s US media partner, that Russia has sent a submarine and other navy vessels to escort the tanker.
The US Coast Guard tried to board it last month in the Caribbean when it was believed to be heading towards Venezuela. The Coast Guard had a warrant to seize the ship over its alleged breaking of sanctions.
The vessel has since dramatically changed course and its approach to Europe has coincided with the arrival of around 10 US military transport aircraft as well as helicopters.
Russia says it is “monitoring with concern” the situation around the ship.
“At present, our vessel is sailing in the international waters of the North Atlantic under the state flag of the Russian Federation and in full compliance with the norms of international maritime law,” its foreign ministry said.
“For reasons unclear to us, the Russian ship is being given increased and clearly disproportionate attention by the US and Nato military, despite its peaceful status,” it said.
Two US officials told CBS News earlier on Tuesday that American forces were planning to board the ship, and that Washington preferred to seize it rather than sink it.
BBC Verify has been looking at footage released by Russia Today, reportedly taken onboard an oil tanker, which shows a ship in the distance matching the profile of a US Coast Guard Legend-class cutter.
It has also been monitoring the latest reported location of the Marinera. According to AIS location data from ship-tracking platform Marine Traffic, its location as of Tuesday morning was in the North Atlantic Ocean, about 300km (186 miles) south of Iceland’s shoreline.
Previous AIS tracking data suggests it travelled north, past the western coast of the UK over the past two days.

On Tuesday, the US military’s Southern Command posted on social media that it “remains ready to support our US government agency partners in standing against sanctioned vessels and actors transiting through this region.
“Our sea services are vigilant, agile, and postured to track vessels of interest. When the call comes, we will be there.”
Before any US military operation was launched from the UK, Washington would be expected to inform its ally.
For now, the UK Ministry of Defence says it will not comment on other nations’ military activities.
The US officials quoted by CBS suggested that America could mount an operation like one conducted last month when US forces seized the Skipper, a large crude oil tanker, flagged to Guyana, that had just left port in Venezuela.
Under international law, vessels flying a country’s flag are under the protection of that nation. However, simply changing a ship’s name and flag doesn’t necessarily change much, Dimitris Ampatzidis, senior risk and compliance analyst at maritime intelligence firm Kpler, told BBC Verify.
“US action is driven by the vessel’s underlying identity [IMO number], ownership/control networks, and sanctions history, not by its painted markings or flag claim,” he said.
Michelle Bockmann, a maritime intelligence analyst at Windward, said changing to a Russian registry could “complicate US enforcement efforts”.
“Under the UN Convention of the Law of the Sea, there’s a provision that allows a stateless vessel to be boarded by authorities. By reflagging to Russia, the vessel is no longer able to be boarded under this provision,” she explained.
Bockmann adds that she has previously observed vessels changing their flag mid-voyage, but “it’s highly unusual and only seen with dark fleet tankers”.
The potential stand-off over the oil tanker comes days after the US shocked the world with the arrest of Venezuela’s Nicolás Maduro in Caracas. It bombarded targets in the city during the operation to extricate him and his wife on suspicion of weapon and drug offences.
Since he was seized, BBC Verify has identified three US-sanctioned tankers that have switched to a Russian registry, including the Marinera.
This follows a broader trend.
Since the seizure of the Skipper, BBC Verify has identified 19 US-sanctioned oil tankers that have switched to a Russian registry, with many of them having previously sailed under a false flag.
[BBC]
Foreign News
Indian gang rape survivor back home after a week in hospital
The survivor of a gang rape in the northern Indian state of Haryana has been discharged from hospital a week after her horrific assault, a police official told the BBC.
The 26-year-old mother-of-two was taken to hospital in Faridabad city on the morning of 30 December with serious head and facial injuries and several fractures.
Her sister said she was out visiting a friend and was waiting for transport just after midnight when two men in an ambulance offered her a lift. They drove her to a deserted place where they raped her and then threw her out of the speeding vehicle.
A police spokesman said they had acted swiftly and arrested the two men and seized the vehicle.
The woman was discharged by the hospital on Monday night following treatment and surgeries.
Senior police official Mukesh Kumar told the BBC that they have approached the court to allow her to visit the prison for an “identification parade”.
Once the court order comes, she would be asked to pick out the two suspects from a crowd of men.
The police said the crime took place on the intervening night of 29th and 30th December.
“The incident took place between 12.30 and 02:00. One stood outside the van and kept an eye on the surroundings while the other raped the woman inside the van,” Yashpal Yadav, public relations officer of Faridabad police, said.
Police had questioned the suspects, who were later produced in court and sent to prison, he added.
A doctor at the hospital where the survivor was treated had said that the woman was brought in “at around 05:30 on 30 December… she had a lot of injuries”.
Shalini Chopra, a social worker and an opposition politician, who spoke to the survivor after she was discharged from the hospital told the BBC that the woman was “better but still in pain”.
The case has provoked anger and outrage in India and drawn comparisons with the horrific gang-rape of a 23-year-old woman on a bus in Delhi in December 2012.
That crime had made global headlines, led to huge protests in Delhi and several other cities and forced the government to introduce tough new anti-rape laws that included the death penalty for the most gruesome attacks.
Four men convicted of the gang-rape and murder were hanged in 2020. One of the rapists died in prison while a juvenile was freed after spending time in a reform centre.
But despite the heightened scrutiny of sexual crimes since then, tens of thousands of rapes and sexual assaults continue to be reported every year.
According to latest police records, 29,670 rapes and 2,796 attempted rapes were reported in 2023. In addition, police also recorded 849 cases of child rapes and 94 cases of attempted rapes of children.
[BBC]
Foreign News
Selfies and smiles: South Korea seeks ‘new phase’ in ties with China
South Korea’s President Lee Jae Myung has called for a “new phase” in ties with China as he met its leader Xi Jinping in Beijing on Monday.
Regional security and lifting Beijing’s unofficial ban on Korean pop culture is high on Lee’s agenda, as he continues his four-day trip in China. He is set to meet China’s Premier Li Qiang and the chairman of parliament, Zhao Leji on Tuesday.
It marks the first visit by a South Korean leader since 2019. Bilateral ties had soured under Lee’s predecessor, impeached ex-president Yoon Suk Yeol, who was very critical of China.
Xi, meanwhile, has appeared keen to shore up ties with South Korea amid a diplomatic row between China and Japan.
South Korea is a US security ally – like Japan – but also relies on China for trade. Experts say Lee is expected to keep walking a diplomatic tightrope between Beijing and Tokyo.
The visit marks the second time the two leaders have met since November when Xi visited South Korea for a regional economic summit.
On Monday Lee stated that the visit was “a crucial opportunity” for the “full-scale restoration of South Korea-China relations”, reported South Korean newspaper Chosun. “We want to usher in a new phase in the development of South Korea-China relations.”
Government officials and companies from both countries signed a series of cooperation agreements on technology, trade and environment.
Lee also took selfies with Xi, using a Xiaomi phone that the Chinese president had gifted him last year.
“The image quality is certainly good, right?” Lee posted on X along with the photos.
Xi noted that the “international situation is becoming more turbulent and complex”.
The meeting followed the US’s capture of Venezuelan president Nicolas Maduro over the weekend.
Xi urged Lee to “firmly stand on the right side of history and make correct strategic choices”, China’s official Xinhua news agency reported.
He also brought up the two countries’ shared history of resisting Japan militarism, saying that China and South Korea should now “work hand in hand to safeguard the outcomes of the victory of World War Two and uphold peace and stability in Northeast Asia”.
Xi’s eagerness to meet Lee signals the pressure he faces in finding a regional ally, Park Seung-chan, professor of China studies at Yongin University told the BBC.
“China may beat around the bush but its demand is clear: side with China and denounce Japan.”
During his four-day trip to China, Lee is expected to hold a memorial service in Shanghai for activists who fought for Korea’s independence from Japan.
But while South Korea is “still showing all its deference towards China”, it wants to “strengthen its relationships with both Japan and China”, Mr Park said.
Lee is reportedly planning to visit Japan later this month to meet Prime Minister Sanae Takaichi.

Security on the Korean Peninsula has also been part of the discussions. Lee has sought to engage North Korea diplomatically, but there has been little progress so far. He needs Chinese cooperation in pressuring the North’s Kim Jong Un to give up his nuclear weapons. Beijing is one of Pyongyang’s biggest supporters, economically and diplomatically.
Lee vowed on Monday to work with China on “viable alternatives for peace on the Korean Peninsula”.
On Sunday Seoul’s military said Pyongyang fired ballistic missiles off its east coast. And on Monday the North’s state news agency said the country test-fired hypersonic missiles to assess deterrence capabilities following recent developments, in an apparent reference to the US’s seizure of Maduro.
It remains unclear how much Lee will be able to push China on North Korea. In September, Xi had pledged to strengthen Beijing’s “traditional friendship” with Pyongyang.
And Seoul and Beijing are not natural allies.
US troops have been stationed in South Korea for decades in case of an attack from the North, and last year the two sides agreed to cooperate on building nuclear-powered submarines. The announcement drew warnings from China.
Lee has also sought to put a stop to China’s build-up of maritime structures in waters between the two countries. Beijing says the structures are fish-farming equipment, but they have sparked security concerns in Seoul.
The two leaders agreed on Monday to continue “constructive” dialogue on the matter, South Korea’s presidential spokesperson said.
Another item high on Lee’s agenda is China’s unofficial restrictions on South Korean music and dramas that have been in place for a decade. K-pop and K-dramas are either unavailable or difficult to access on Chinese media platforms.
While China has never acknowledged a ban on Korean artists, it’s believed to be a protest against South Korea’s decision to deploy a US anti-missile system in 2016, which China sees as a threat to its military operations in the region.
China is a massive market for Korean entertainment, which is already a huge global success.
At a Korea-China business forum on Sunday, Lee encouraged deeper bilateral collaboration in beauty products, food and cultural content including movies and music.
A South Korean presidential spokesperson said on Monday that the two leaders agreed to discuss the gradual expansion of cultural exchanges – without specifying concrete commitments on K-dramas or K-pop.
A Chinese foreign ministry spokesperson similarly told reporters on Tuesday that both sides have agreed to “carry out orderly, healthy, and beneficial cultural exchanges”.
Speaking before Korean residents in Beijing on Sunday, Lee said his visit would “serve as a new starting point to fill in the gaps in Korea-China relations, restore them to normal and upgrade them to a new level”.
-
News2 days agoBroad support emerges for Faiszer’s sweeping proposals on long- delayed divorce and personal law reforms
-
News2 days agoInterception of SL fishing craft by Seychelles: Trawler owners demand international investigation
-
News3 days agoPrivate airline crew member nabbed with contraband gold
-
News5 days agoHealth Minister sends letter of demand for one billion rupees in damages
-
News16 hours agoGovt. exploring possibility of converting EPF benefits into private sector pensions
-
Opinion7 days agoRemembering Douglas Devananda on New Year’s Day 2026
-
Features3 days agoPharmaceuticals, deaths, and work ethics
-
Features2 days agoEducational reforms under the NPP government
