Trending Now - North Korea's Hidden $1 Million Monthly Cyber Operation Unveiled

WHO:

Bitcoinist - ZachXBT, a crypto detective, uncovered the operation.

Cointelegraph - North Korean IT workers involved in the scheme.

WHAT:

Cointelegraph - North Korea's crypto playbook now includes fake developers, conference contacts, and major DeFi exploits, indicating a broader strategy in the cryptocurrency industry.

Bitcoinist - North Korea's hidden cyber operation generates $1 million monthly.

Cointelegraph - The operation involved over 390 accounts, chat logs, and transaction histories.

WHERE:

Bitcoinist - The operation is linked to North Korea.

WHEN:

Bitcoinist - The investigation is part of the ongoing DPRK Crypto-Infiltration Saga, with revelations occurring in 2026.

WHY:

Cointelegraph - The North Korean IT workers coordinated crypto payments to facilitate their operations.

HOW:

Cointelegraph - Payments were coordinated through a server using a shared password, “123456.”

(UPDATED April 9, 2026 15:24 UTC)

North Korea's involvement in the cryptocurrency industry has taken a concerning turn, as new reports reveal the use of fake developers and conference contacts, along with significant DeFi exploits. This indicates a broader strategy aimed at manipulating the crypto market. The findings were reported by Cointelegraph at 15:23 UTC.

--

(UPDATED April 9, 2026 13:22 UTC)

A recent investigation has revealed that North Korea's hidden cyber operation generates around $1 million monthly, with over 390 accounts, chat logs, and transaction histories linked to the scheme. Crypto detective ZachXBT uncovered that North Korean IT workers coordinated these crypto payments through a server secured by the easily guessable password “123456.” This investigation is part of the ongoing DPRK Crypto-Infiltration Saga, with significant developments emerging in 2026.