UN Panel of Experts S/2024/215
Andariel ransomware attacks on three companies
Para 187: “Andariel infiltrated financial institutions’ websites and stole a further $360,000 worth of Bitcoin (BTC) through ransomware attacks on three companies (see also para. 134). Some of these funds are believed to have been taken into the Democratic People’s Republic of Korea by conversion into fiat currency through third-country cryptocurrency exchanges and a facilitator ... Andariel used ransomware campaigns to fund additional malicious activity, especially cyberespionage operations, throughout 2022.”