North Korea's cryptocurrency hacking has become more sophisticated, with an increasing number of groups involved

Reports have emerged that cyber attacks originating from North Korea are becoming increasingly sophisticated and that the number of groups participating in such criminal activities is growing.
Cryptocurrency company Paradigm released a report titled "Anatomy of the North Korean Threat"
According to the report, North Korea-led hacking attacks are not only aimed at cryptocurrency exchanges, but also involve approaches that utilize social engineering techniques.
The attacks have been carried out in a variety of ways, from phishing attacks to complex attempts to take control of the supply chain. Notably, some attacks have been carried out over a period of more than a year, suggesting that North Korean hackers have carefully timed their attacks.
The United Nations estimates that North Korea earned $3 billion through cyber attacks between 2017 and 2023.
In particular, there has been a sharp increase in such hacking activity in 2024 and 2025, with attacks on cryptocurrency exchanges WazirX and Bybit resulting in approximately $1.7 billion (approximately 254.8 billion yen).
Paradigm has analyzed that there are at least five North Korean organizations that are leading these hacking attacks. The most prominent group is the Lazarus Group.
s Group), Spinout, AppleJeus, Dangerous Password
Password and TraitorTrader, and there are also other cases of North Korean IT professionals infiltrating overseas technology companies.
It has been reported.