Cybersecurity firm Mandiant has revealed that North Korea’s government is relying on hacking organizations to fund espionage activities.
APT43, a state-sponsored hacking syndicate, has been identified as a major player in North Korea’s espionage schemes by relying on strategic intelligence collection. Mandiant notes that APT43’s focus since 2018 revolves around nuclear intelligence, while their attacks on health verticals point toward Pyongyang’s shifting focus.
Despite the affiliations with the North Korean state, Mandiant’s report claims that APT43 operates with a measure of independence. The criminal syndicate regularly attacks digital asset wallets to raise funds for itself, unlike APT38, which sources funds for the government.
“The prevalence of financially-motivated activity among North Korean groups, even among those which have historically focused on cyber espionage, suggests a widespread mandate to self-fund and an expectation to sustain themselves without additional resourcing,” said Mandiant.
