DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Cryptocurrency thefts by DPRK IT workers (OnyxDAO, Exclusible Penthouse, BTCTurk)

Date (as written)
2024
Year
2024
Actors (as written)
DPRK IT workers (according to one private sector partner)
Actor pages
DPRK IT workers
Tags (as written)
theft by IT workers
Dollar figures (as written)
$3.8 million (OnyxDAO); $827,000 (Exclusible Penthouse); $62.5 million; $3.8 million; $827,000

Source entries (1)

Multilateral Sanctions Monitoring Team (MSMT) report, 22 Oct 2025

Cryptocurrency thefts by DPRK IT workers (OnyxDAO, Exclusible Penthouse, BTCTurk) · 2024
(MSMT/2025/2, report p. 34) “DPRK IT workers are also engaging in cryptocurrency thefts, including thefts in 2024 from Munchables ($62.5 million, ultimately returned), OnyxDAO ($3.8 million), Exclusible Penthouse ($827,000), and BTCTurk, according to one private sector partner.” (Note: Table 2 lists BTCTurk under TraderTraitor and Exclusible Penthouse under DPRK (unidentified).)
https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/pdfs/2025-10-22_MSMT-Report.pdf

Suggest a correction on GitHub