North Korea’s Cyber Operations Targeting U.S. Firms

[cryptoenthusiast]

Vong’s case highlights a growing North Korean cyber strategy: insider access combined with crypto theft. Many 2025 breaches started with social engineering—phishing, impersonation, and fake support requests—rather than exploiting software vulnerabilities. U.S. companies remain at risk as foreign operatives gain employment and insider access through false identities, underscoring the need for stricter hiring and cybersecurity practices.

[JanEmil]

insiders very hard to protect against.

[Abdul Khan]

The scale of these heists underscores major security gaps across the industry.