North Korea — Cyber Threat Profile
North Korea operates one of the most aggressive state-sponsored cyber programs globally. The Lazarus Group and affiliated units conduct financially motivated attacks , including cryptocurrency theft, ransomware, and SWIFT system exploitation , directly funding the regime and circumventing international sanctions. Estimated billions stolen from global financial institutions and crypto exchanges. Separately, cyber espionage targets defense contractors, governments, and nuclear programs. Domestic internet access is virtually nonexistent for citizens. The regime faces zero accountability, enabling persistent and escalating operations. Allied nations consistently attribute attacks publicly, but deterrence remains limited. North Korea treats cyberspace as a primary asymmetric instrument of national power and revenue generation.- World Cybercrime Index 2024 (origin significance): 10.61 / 100, #7 worldwide
- Secure Internet servers per 1M people (2024): 10.4 (source: World Bank)
Read the full analysis on IntelFusions