The U.S. Justice Department indictment described North Korean RGB-linked programmers, associated in security reporting with Lazarus Group and APT38, as conducting a long-running conspiracy involving destructive attacks, financial theft, extortion, and cryptocurrency operations. The charged activity included targeting cryptocurrency companies and thefts from Slovenian, Indonesian, and New York financial or crypto entities, alongside malicious cryptocurrency applications used as backdoors.