ClearSky describes CryptoCore, also called Crypto-gang, Dangerous Password or Leery Turtle, as a persistent threat actor targeting cryptocurrency exchanges since at least 2018. The report says the group focused mainly on exchanges in the United States and Japan and successfully stole millions of dollars’ worth of cryptocurrency. The available source evidence frames the work around the actor’s profile, modus operandi and infrastructure, but does not itself provide a North Korea attribution.