North Korean hackers have intensified attacks on cryptocurrency companies, using fake job offers and sophisticated malware to access cloud systems. According to Google Cloud and Wiz, in just 2025, groups associated with North Korea stole cryptocurrencies worth over $1.6 billion.

The Google Cloud report for the second half of 2025 states that UNC4899 — a North Korean hacking group that is actively monitored — successfully attacked two companies by gaining the trust of employees through social media.

Among the group's largest attacks are the hacking of the Japanese exchange DMM Bitcoin for $303 million and the hacking of exchange #ByBit for $1.5 billion, which became known in February 2025.