UN Panel of Experts S/2022/668
Voice phishing hacking applications sold by DPRK IT worker Song Rim · July 2020 (arrests)
Para 121: “According to information provided by a Member State, information technology (IT) workers of the Democratic People’s Republic of Korea linked to the Munitions Industry Department have been earning foreign currency by selling voice phishing hacking applications and operating multiple overseas servers and Internet Protocol addresses.” Footnote 94: “According to the authorities of this Member State, the amount of lost funds in these voice phishing cases is estimated at around $635 million.” Para 122: “In July 2020, four Republic of Korea nationals were arrested by the authorities in Tianjin, China, and extradited to the Republic of Korea. One testified that criminal groups had purchased the personal information of Republic of Korea nationals as well as voice phishing hacking applications from a Democratic People’s Republic of Korea IT worker. ... An individual in the video was identified as Song Rim, a worker at the “Biryugang Overseas Technology Cooperation Company” ...” (annexes 51, 52)