South Korea arrests hackers who stole $28 million from the elite
Hackers exploited a vulnerability in the SIM card system to gain access to the accounts of 258 wealthy Koreans, including BTS’s Jungkook
29.08.2025 - 13:10
357
3 min
0
Key points:
- Seoul police arrested 16 members of a hacker group that stole $28,1 million.
- The victims included 258 people, including businesspeople from the top 100 corporations, government officials, and celebrities.
- The total assets of the targets exceeded $39,8 billion, with the largest single theft amounting to $15,4 million in cryptocurrency.
Seoul police cracked down on an international hacker group that attacked South Korea’s business elite, including Jungkook from BTS and senior executives of major companies. The criminals stole $28,1 million (39 billion Korean won) from the cryptocurrency and bank accounts of 16 victims.
How the hackers operated
According to police, the group was led by two Chinese citizens, aged 35 and 40, who ran the operation from China and Thailand. From July 2023 to April 2024, they hacked into the websites of government agencies, IT companies, and banks, stealing the personal data of 258 wealthy citizens. Among them were 75 businessmen, 11 officials and lawyers, 12 celebrities, 6 athletes, and 28 crypto investors.
The total amount of assets in the victims’ accounts reached $39,8 billion (55,2 trillion won). The main target was an account with assets worth $8,6 billion (12 trillion won).
The hackers registered 118 SIM cards in the names of 89 victims, exploiting a vulnerability in the remote verification system of virtual operators. This allowed them to bypass authentication and gain access to bank accounts and crypto wallets.
Korean actress stole $3,1 million to buy cryptocurrency
The prosecutor’s office has requested a sentence of three years in prison for her
Losses and prevented thefts
The organization withdrew $28,1 million from 16 victims, including the largest single cryptocurrency theft of $15,4 million. Another $18 million was attempted to be stolen from 10 people, but these transactions were blocked by banks. Thanks to prompt action, $9,2 million was recovered.
In the case of Jungkook, the attackers attempted to steal $6,1 million worth of Hybe Entertainment shares, but the transaction was stopped by the financial monitoring system.
South Korea suspends crypto lending on exchanges
The Financial Services Commission has ordered exchanges to temporarily freeze crypto lending due to a lack of regulation
Arrests and international cooperation
In total, the police arrested 16 people, including four intermediaries. Two alleged ringleaders were detained in Bangkok with the assistance of Interpol. One of them has been extradited to Korea, while the other remains in custody in Thailand.
Oh Gyu-sik, head of the Seoul Metropolitan Police Agency’s 2nd Cyber Investigation Unit, noted:
“This incident of bypassing the non-face-to-face authentication system is ‘unprecedented,’ and the vast sums accessed ‘could have easily led to an even bigger crime.’”
According to experts, hackers are increasingly targeting crypto owners, but in South Korea, they are also attacking a wider range of wealthy citizens.
Useful material?
Incidents
The company is linking the incident to a compromised private key on a service wallet, rather than a smart contract exploit
May 22, 2026
Incidents
Following the incident, the project temporarily halted trading operations and node activity.
May 15, 2026
Incidents
The user spent weeks unsuccessfully trying to guess the password until Claude helped find an old wallet backup file
May 14, 2026
Crypto regulations
Authorities are introducing mandatory registration for companies handling cross-border crypto transactions
May 8, 2026
Incidents
According to Blockaid, the attack may have been carried out by the same hacker behind the 1inch Fusion V1 exploit.
May 7, 2026
Incidents
The attacker gained administrative access and altered contracts to drain user funds
Apr 30, 2026
Telegram
Twitter