GlobalThreatReport2024.pdf (5 MB)

CrowdStrike's 2024 Global Threat Report documents North Korean adversary activity as maintaining a high operational tempo during 2023, with financially motivated cryptocurrency theft and intelligence collection against South Korean and Western organizations. The report describes targeting across academic, aerospace, defense, government, manufacturing, media, and technology sectors, while using CrowdStrike's CHOLLIMA naming convention for DPRK-linked adversaries. For defenders, the extracted evidence supports monitoring for DPRK intrusion tradecraft tied to financial theft, espionage, and stealthy collection operations rather than treating the report as a single-indicator advisory.