Trend Micro’s 2025 APT report frames North Korea as an “Asymmetric Saboteur” using AI to automate cybercrime and support state priorities such as missile funding. The DPRK-relevant section is strategic rather than IOC-driven, emphasizing AI-assisted reconnaissance, phishing-lure generation, evasion, and faster attack workflows across the intrusion lifecycle. The broader report also describes nation-aligned APTs increasingly abusing legitimate tools, cloud services, and trusted platforms to blend into normal activity and extend dwell time. Targeting is presented as strategically driven, with government, technology, manufacturing, energy, edge devices, and software supply chains highlighted as key exposure areas. The value for DPRK-focused defenders is contextual: it links North Korea’s cybercrime-driven mission to the same AI-enabled speed, stealth, and platform-abuse trends reshaping modern APT operations.