North Korean Cyber Units Target Cryptocurrency Exchanges in Southeast Asia

North Korean state-sponsored hacking groups have intensified attacks against cryptocurrency exchanges across Southeast Asia, according to a new report from regional cybersecurity authorities. The operations are believed to fund Pyongyang's weapons programs.[^1]

Investigators have traced a series of sophisticated intrusions to the Lazarus Group, a unit long associated with the North Korean military. The attackers used social engineering and custom malware to breach exchange wallets.[^2]

"The scale and persistence of these operations is unprecedented," a regional official noted. Losses across the affected platforms are estimated in the hundreds of millions of dollars over the past year.

[^1]: Regional Cybersecurity Authority joint report, June 2026.
[^2]: Blockchain analysis firm briefing, Singapore, June 2026.