The U.S. Treasury sanctioned Lazarus Group, Bluenoroff, and Andariel as North Korean state-sponsored cyber groups controlled by the Reconnaissance General Bureau. The release describes Lazarus activity across government, military, financial, manufacturing, media, entertainment, shipping, and critical infrastructure targets, including espionage, theft, monetary heists, and destructive malware. It also highlights Bluenoroff’s revenue-focused financial intrusions and Andariel’s targeting of South Korean government, infrastructure, and financial systems. The report is primarily an attribution and sanctions reference for DPRK cyber operations.