North Korea has stolen $1.65 billion this year through cyberattacks, channeling the funds towards its weapons programs.

The regime in Pyongyang, led by Kim Jong Un, has intensified cyber operations, turning hacking into an essential source of currency in the context of international sanctions. According to the report from the multilateral sanctions monitoring team (MSMT), North Koreans have stolen at least $1.65 billion between January and September 2025, including $1.4 billion from the cryptocurrency platform Bybi. These funds are used for the development of weapons of mass destruction.

Additionally, North Korea has evaded sanctions by sending IT employees to various countries, including China and Russia, in order to obtain prohibited foreign income. MSMT discovered that the regime planned to send 40,000 workers to Russia, including IT specialists. Furthermore, North Korean workers have secured contracts for animation projects with Western companies, hiding their nationality. South Korean intelligence services reported that North Korean agents have used LinkedIn to recruit South Koreans in the defense sector, with the aim of obtaining technological information. MSMT, which monitors violations of UN sanctions, includes members from several countries, including the USA and South Korea.