Google Threat Intelligence Group (GTIG) / Google Cloud
UNC3782 cryptocurrency crime and targeting of South Korean organizations combating crypto crime · 2025-02-12 (datePublished)
UNC3782, a suspected North Korean threat actor active since at least 2022, conducts both financial crime operations against the cryptocurrency sector and espionage activity, including the targeting of South Korean organizations attempting to combat cryptocurrency-related crimes, such as law firms and related government and media entities.