DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Netherlands NCTV Cybersecuritybeeld Nederland 2025 (CSBN 2025; with AIVD/MIVD input) (5)

Date (as written)IncidentCountryActors
(reporting period 2024-2025)North Korean hackers stole digital currency from Dutch organisations among othersNetherlandsNoord-Koreaanse hackers
(reporting period 2024-2025)Cyber attacks on Dutch organisations by North Korean hackers (per CrowdStrike reporting cited by NCTV)NetherlandsNoord-Koreaanse hackers (per CrowdStrike)
2025-02BybitUnited Arab EmiratesLazarus
in 2025FIOD/BKA/Europol/zeroShadow takedown of server network in Germany used to launder crypto stolen by North Korea; €34 miljoen seizedGermanyNoord-Korea
(not dated)North Korean freelance IT workers hired abroad under false identities, stealing data or cryptocurrencyNoord-Koreaanse freelance IT’ers