South Korean Man Indicted for Creating Gambling Sites with Help from North Korean Hackers
The Seoul Central District Prosecutors’ Office indicted a man surnamed Kim for collaborating with hackers from Bureau 313 of North Korea’s Ministry of Defense Industry.
How the Scheme Worked
From 2022 to 2024, Kim, with the support of North Korean hackers, created and operated 16 illegal iGaming websites. These sites generated revenue through commissions and technical maintenance. He earned approximately 23.5 billion won (USD 17.2 million).
North Korean specialists not only developed the websites but also provided automated programs for online advertising. They were also responsible for fixing technical issues.
Communication via Telegram
The investigation revealed that between October and November 2023 alone, Kim exchanged 1,181 messages with two North Korean hackers via Telegram and other platforms.
Bureau 313: Who Are They?
Bureau 313 of the Ministry of Defense Industry of North Korea is responsible for IT strategies and earning foreign currency for the country.
One of their methods involves creating shell companies in China, particularly in Dandong, to produce illegal software and carry out projects like unlawful gambling sites.
Transfers to North Korea
Out of the total amount earned by Kim, at least 7 billion won (approximately USD 5.1 million) was transferred to the hackers.
Prosecutors suspect that this money eventually reached the Kim Jong Un regime and was used as part of state financing.
Life in China and Arrest
To avoid capture, Kim lived in China. South Korea’s National Intelligence Service received information in early 2023 that a South Korean citizen abroad was operating illegal gambling services.
In November 2023, Kim arrived in South Korea, where he was arrested by the Seoul National Security Office. After a year and a half of investigation, he was taken into custody and officially indicted on May 7, 2025.
Legal Charges
The charges against Kim include:
- Violation of the National Security Act
- Illegal gambling operations
- Concealment of criminally obtained income
Case Statistics
| Indicator | Data |
|---|---|
| Operation Period | 2022–2024 |
| Number of Sites | 16 |
| Revenue | ₩23.5 billion (USD 17.2 million) |
| Messages with Hackers | 1,181 |
| Transfers to North Korea | ₩7 billion (USD 5.1 million) |
What’s Next?
The investigation highlights the active involvement of North Korean IT structures in international cybercrime.
South Korean authorities continue to monitor digital schemes linked to North Korea and warn of potential national security threats from hacker groups.
Kim awaits trial, during which more details may emerge regarding ties between South Korean individuals and North Korean cybercriminal operations.