Cybercrime: A Multifaceted National Security Threat

This report profiles multiple DPRK-linked threat clusters that conduct large-scale financially motivated cyber operations and espionage, emphasizing their targeting of cryptocurrency and financial systems (including SWIFT compromises), reported thefts estimated in the billions, use of wallet-stealing phishing and malicious apps/NFTs, money-laundering through mules and casinos, and instances of destructive malware and suspected ransomware to cover operations or deny access.