North Korea has increased its digital operations significantly, stealing over $2 billion in cryptocurrency in 2025 and deploying sophisticated fake IT worker schemes. These efforts are part of a broader strategy to fund the regime and avoid sanctions, with many cyberattacks linked to North Korean threat actors. #NorthKoreaCyberattacks #Chainalysis #BybitHeist #AmazonITWorkers
Keypoints
- North Korean hackers stole over $2 billion in cryptocurrency in 2025, mostly via the Bybit heist.
- Despite fewer attacks, North Korea’s cyber operations are focusing on laundering stolen assets.
- North Korea’s cyber theft total has now reached approximately $6.75 billion historically.
- Fake IT workers and impersonation schemes are used to infiltrate cryptocurrency exchanges and gather intelligence.
- Amazon has identified over 1,800 suspected North Korean IT job applicants attempting identity fraud since April 2024.