North Korean crypto attacks rising in sophistication, actors — Paradigm



North Korean cyberwarfare attacks on the cryptocurrency industry are growing in sophistication and the number of groups involved in such criminal activity, Crypto Firm Palace Warned The report “North Korean Reduction.”

The report said that the cyber attack of North Korea-origin leads to attacks from exchanges and social engineering efforts to fishing attacks and complex supply chain hijacks. In some cases, the attacks take a year to play out, North Korean operators spent their time.

https://www.youtube.com/watch?v=NDV0RFEHETQ

United Nations Estimate Between 2017 and 2023, North Korean hackers have given $ 3 billion to the country. Overall in 2024 and this year, with successful attacks against the Crypto exchanges Wazirux and Bibit, the attackers found around $ 1.7 billion simultaneously.

The paradigm writes that the North Korean organizations orchestrates the number of these attacks at least five: Lazarus Group, Spinout, Applejeus, Dangerous Password and Traitortrader. There is also an alliance of North Korean operators who pose as IT workers, infiltrating technical companies worldwide.

Connected: Typoscating in crypto, explained: how hackers exploit small mistakes

High Profile Attack and Predictable Laundering Flag

The most famous North Korean Hacking Team, Lazarum Group is credited for some of the most high-profile cyber attacks since 2016. According to the paradigm, the group hacked Sony and Bank of Bangladesh in 2016 and in 2017 helped to orchestrate the Vanakri 2.0 rangesware attack.

It has also targeted in the cryptocurrency industry, sometimes for a lot of impact. In 2017, the group hit two crypto exchanges – Youbit and Bithumb. In 2022, the Lazarus Group exploited the Ronin Bridge, resulting in hundreds of millions of people in hundreds of lost assets. And in 2025, it stole $ 1.5 billion from the infamous baibit, causing a shock to the entire Crypto community. The group may be behind some solana memecoin scams.