
U.S. government records now link named North Korean hacker groups to state intelligence while new reporting details how children are trained to feed that operation.
Story Snapshot
- Treasury and Justice Department documents tie Lazarus-linked hackers to North Korea’s intelligence service.
- Officials say North Korea trains cyber operators to steal and launder money from banks and crypto firms.
- Reuters describes a pipeline that selects students young and moves top talent into military cyber units.
- U.S. statements link the Pyongyang University of Automation to cyber units and major crypto thefts.
What U.S. records say about North Korea’s hacker ecosystem
The U.S. Treasury identified Lazarus Group, Bluenoroff, and Andariel as entities controlled by North Korea’s government and tied to the Reconnaissance General Bureau, the country’s intelligence arm. The Justice Department later charged named North Korean operators in a wide hacking conspiracy that included theft and extortion aimed at banks and cryptocurrency platforms. These designations and charges frame a state-linked ecosystem, not just scattered criminals, according to the official actions and filings cited.
Treasury described how North Korea trains cyber actors to target financial firms and to launder stolen funds, underscoring the goal of raising hard currency under sanctions. Treasury also named the Pyongyang University of Automation as a premier training hub that feeds graduates into cyber units under the Reconnaissance General Bureau. Officials attributed a major crypto theft from the Ronin blockchain in 2022 to Lazarus Group, signaling both capability and intent to hit digital assets at scale.
How recruits are chosen and trained, according to new reporting
Reuters interviewed a former trainer and defectors who said authorities select about 150 to 200 children each year, starting around ages 11 to 12, and route top performers to elite universities and then military cyber units. The reporting adds vivid detail to the pipeline’s shape, though it relies on interviews rather than public North Korean records. The accounts align with U.S. statements that formal institutions help prepare operators, but some student counts remain based on witness recollection.
The described curriculum emphasizes math, coding, and foreign languages, which support long intrusions and money laundering schemes, according to the interviews. The pathway reportedly includes specialized schools and favored housing for families of top students, an incentive model common in closed systems. While the United States has not published rosters or class lists, Treasury’s separate identification of a named university feeding cyber units provides a documented anchor for a structured talent pipeline.
Why this matters for Americans and global markets
Sanctions squeeze North Korea’s legal trade, so cyber theft offers revenue with fewer risks than shipping banned goods. Analysts and U.S. officials describe a shift from bank heists to cryptocurrency targets, where blockchain tools can hide flows across borders. The Lazarus-attributed Ronin theft showed how one breach can drain hundreds of millions of dollars and move the proceeds through mixers and shell accounts, raising costs for exchanges, users, and banks worldwide.
🔐 North Korea’s Secret Army of Hackers: How Kim Jong Un Built a Cyberwarfare Machine Behind the 3 Billion Binance Heist
-Fact Checker: ✅: 5 ❌: 0 || 5/5 → Score: 100% 🦾
-Prediction: 📈 4 Positive | 📉 1 Negativehttps://t.co/c3r4wCaimI— Undercode News (@undercode_news) November 6, 2026
Readers across the political spectrum share worries about a system that fails to protect savings and retirement funds. Lawmakers argue about energy, immigration, and welfare, yet cyber defenses at key financial nodes still lag. North Korea’s state-linked crews exploit that gap. Clear steps—stronger exchange security standards, faster tracing of wallets, and tighter oversight of remote contractors—can raise the price of hacking and cut the return on theft, no matter who controls Congress or the White House.
Sources:
youtube.com, reuters.com, techtarget.com, justice.gov, biz.heraldcorp.com
© patriotpostnews.com 2026. All rights reserved.

















