North Korea's state-directed system for funding its weapons programs by smuggling oil and coal and stealing cryptocurrency outside the international sanctions order.
Cryptocurrency rails used globally to launder illicit proceeds, linking ransomware gangs, North Korean hackers, and Russian exchanges in a US$82 billion shadow financial system.
full dossier ›Malware that encrypts victim files and demands cryptocurrency ransoms, now present in 44% of global data breaches and the primary revenue engine for state-linked criminal networks.
Europol, Microsoft and partners take 326 servers and 142 domains, freezing €41m in crypto
After two years of fragmentation, the top 10 crews drive 71% of victims; a Qilin-defector brand scales faster than any on record
OFAC names three executives and a Kyrgyz-Russian shell network; Grinex then halts, blaming a 'Western special services' hack
Pyongyang's hackers drove 76% of 2026 crypto-hack value while OFAC and DOJ pursued the fake-employee revenue machine