Loading...
Loading...
North Korea's billion-dollar cryptocurrency operations, the emerging CRINK alliance, and how adversary nations increasingly coordinate cyber attacks against American targets.
Lazarus Group and state-sponsored financial theft
Lazarus Group has stolen over $5 billion in cryptocurrency since 2021 to fund North Korea's nuclear weapons program. Nearly every Fortune 500 company has unknowingly hired North Korean IT workers.
The Lazarus Group's WannaCry attack paralyzed nearly 200,000 computers across 150 countries in just 7 hours. Major targets included Russia, India, Ukraine, and Taiwan.
North Koreans working remotely for American companies
Nearly every Fortune 500 CISO interviewed by Mandiant (Google Cloud) admitted to unknowingly hiring at least one North Korean IT worker. These workers have funneled up to $1 billion to Kim Jong Un's nuclear program.
China, Russia, Iran, and North Korea are increasingly coordinating their cyber operations, sharing tools, techniques, and targets against Western nations.
Espionage, IP theft, critical infrastructure
Ransomware, infrastructure attacks, disinformation
Water systems, election interference, retaliation
Financial theft, cryptocurrency, ransomware
Shared Infrastructure
Security researchers have observed APT groups from these four nations sharing malware, command-and-control infrastructure, and operational tactics. What works for one nation is often adopted by others.
Components manufactured abroad may contain backdoors or malicious modifications
ChinaAttackers infiltrate software updates to compromise thousands of victims at once
Russia (SolarWinds), N. KoreaForeign nationals employed remotely can access sensitive systems
North Korea (IT workers)Nation-state threats don't operate in isolation. Understanding how adversaries coordinate helps you better defend against all of them.