According to Financial Security Group, Andariel was able to take over the server without being detected.
Though this Monero haul only adds up to approximately $26,000, experts have traced several similar attacks to North Korea over recent months.
Since May, North Korean actors have targeted at least three South Korean cryptocurrency exchanges with the suspected intent of stealing funds, cybersecurity firm FireEye announced in September.
While how much has been stolen through these attacks isn’t yet clear, it’s believed that North Korea will continue carrying them out in order to fund its nuclear and missile programmes.
“With North Korea’s tight control of its military and intelligence capabilities, it is likely that this activity was carried out to fund the state or personal coffers of Pyongyang’s elite, as international sanctions have constricted the Hermit Kingdom,” added FireEye.
South Korea, meanwhile, has been cracking down on cryptocurrencies. Its government recently announced it would ban opening anonymous cryptocurrency accounts and introduce legislation giving regulators the power to close virtual coin exchanges if necessary.
Other hacking groups are also seeking to benefit from the rise in interest around cryptocurrencies, and have started infecting unsuspecting victims’ computers with cryptojacking software that slows the machines down significantly.