A South Korean man has been indicted for operating a series of illegal online gambling websites with the assistance of North Korean hackers. According to local media, Korea Joongang Daily, the Seoul Central District Prosecutors’ Office announced charges against the individual, surnamed Kim, which include violations of the National Security Act, unlawful gambling operations, and the concealment of criminal proceeds.
The report said that the investigation revealed that Kim worked in direct coordination with hackers from North Korea’s 313 Bureau, a unit under the Munitions Industry Department, between 2022 and 2024. These hackers, who were reportedly active in China, helped Kim launch and maintain a network of 16 gambling websites, which were subsequently sold to domestic operators. Their services extended beyond technical support, as they also provided automated marketing tools to promote platforms online.
South Korean authorities stated that they discovered Kim maintained contact with two North Korean hackers through encrypted messaging applications, exchanging over 1,100 messages during a two-month period in late 2023. Through this collaboration, Kim generated profits by collecting maintenance fees and commissions from users purchasing gambling credits. His total earnings from March 2021 to August 2024 amounted to approximately 23.5 billion won ($17.2 million). Investigators have determined that at least 7 billion won ($5 million) from these earnings were transferred to the North Korean operatives.
Kim is believed to have relocated to China to avoid detection while expanding his gambling enterprise. Intelligence received by South Korea’s National Intelligence Service in early 2023 identified a South Korean national residing in China as being involved in the distribution of illegal gambling services targeting users in South Korea. Kim was arrested upon re-entering South Korea in November 2023; he was formally detained on 7 May.
North Korea’s 313 Bureau, which has been associated with front companies operating from cities such as Dandong in China, plays a central role in the regime’s IT strategy. This includes deploying skilled operatives abroad to create digital tools for illicit enterprises, such as gambling websites, that funnel revenue back to Pyongyang.
South Korean prosecutors continue to investigate the wider network involved in the operation and any further financial connections to North Korea. The government has reiterated its commitment to combating online gambling and cybercrime, particularly when such activities intersect with threats to national security.