cta-nk-2023-0622.pdf (1 MB)

Kimsuky is the most common threat group, followed by Lazarus Group and APT37. South Korea and the United States are the most common targets, but North Korean threat actors have a global reach, targeting entities in at least 29 countries. Despite its centralized leadership system, North Korea creatively targets a wide range of industries across different countries. Cryptocurrency heists are on the rise, but espionage remains the primary goal of North Korean cyberattacks.