| From approximately September 2019 through November 2022 | Phagnasay, Salazar and Travis identity-lending IT worker scheme (S.D. Ga.) | United States | overseas IT workers (DPRK scheme) |
| November 2023 | Theft of approximately $138 million from a Panama-based virtual currency exchange | Panama | APT38 |
| publication date not shown on page (covers activity since June 2023) | Jade Sleet theft from an Estonia-based cryptocurrency firm (early June 2023) | Estonia | Jade Sleet |
| July 2023 | Theft of approximately $100 million from a Panama-based virtual currency payment processor | Panama | APT38 |
| November 2023 | Theft of approximately $107 million from a Seychelles-based virtual currency exchange | Seychelles | APT38 |
| 2025-11-13 (press release date) | Ukrainian Pleads Guilty in DC in Laptop Farm Scheme That Generated Income for North Korean IT Workers | | |
| 2025-11-14 (press release date) | Justice Department Announces Nationwide Actions to Combat Illicit North Korean Government Revenue Generation | | |
| March 2025 | FBI seizure of USDT from APT38 actors (forfeiture complaints) | | APT38 |