UK NCSC Annual Review 2024
DPRK targeting of cryptocurrency companies/users and data theft from defence, governments, academia; DPRK IT workers targeting UK firms · (Annual Review 2024)
DPRK threat actors indiscriminately target cryptocurrency companies and users globally, and attempt to steal data from defence industries, governments, and academia to improve their internal security and military capabilities. In July 2024, the NCSC co-signed an advisory on a group sponsored with the DPRK's overseas intelligence agency that has targeted defence, aerospace and nuclear entities globally. UK firms are almost certainly being targeted by IT workers from the DPRK - disguised as freelance third-country IT staff - to generate revenue for the DPRK regime.