RSIS assesses North Korea’s cyber threat as an enduring national-security problem centered on Bureau 121 and associated DPRK cyber units. The article describes Pyongyang’s cyber forces as capable of espionage, destructive malware, and operations launched or masked through DPRK-friendly states such as Belarus, China, India, and Russia. It cites historical examples including the Sony Pictures destructive attack and the Bangladesh Bank theft, then outlines scenarios involving reconnaissance of vulnerable portals, spear-phishing, credential compromise, manipulation of insiders, and possible attacks against critical infrastructure. The report is strategic threat analysis rather than an IOC-focused intrusion report, but it supports continued vigilance against DPRK cyber operations.