Assessed Cyber Structure and Alignments of North Korea in 2023

North Korea’s cyber program shows signs of growing complexity and adaptability, including supply chain attacks and continuous targeting of blockchain and fintech sectors. Data collected by cybersecurity firm Mandiant suggests a shift in the country’s cyber posture to an increasingly collaborative structure, with different threat groups sharing tools and code. The regime’s cyber operations continue to evolve, deploying malware tailored to different platforms and focusing not just on espionage but also financial crime.