DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

M2

Date (as written)
2024-10-31
Year
2024
Actor pages
CryptoCore
Dollar figures (as written)
$13,000,000; 13.1 ($ Million)

Source entries (2)

tayvano/lazarus-bluenoroff-research

M2 · 2024-10-31
Amt Stolen: $13,000,000
https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/hacks-and-thefts/m2.md

Multilateral Sanctions Monitoring Team (MSMT) report, 22 Oct 2025

M2 Exchange · 2024-10-31
Table 2: DPRK Cryptocurrency Thefts, January - December, 2024. Date: 2024-10-31; Victim: M2 Exchange; DPRK APT: CryptoCore; Amount ($ Million): 13.1. Report: "In coordination with Chainalysis and Mandiant, MSMT Participating States have attributed the cryptocurrency heists in tables 2 and 3 to DPRK actors."
https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/pdfs/2025-10-22_MSMT-Report.pdf

Values found later for empty fields

country: UAE
Employees of M2 Exchange (based in UAE), Ripio (based in Cayman Islands), and Alex Lab (based in Singapore) were among the compromised victims
https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/pdfs/2025-10-22_MSMT-Report.pdf
actors: CryptoCore
2024-10-31 M2 Exchange CryptoCore 13.1
https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/pdfs/2025-10-22_MSMT-Report.pdf

Suggest a correction on GitHub