MSMT report says DPRK cyber actors stole at least $2.8 billion in crypto from Jan 2024–Sept 2025

True

Evidence from credible sources supports the statement as accurate. Learn more in Methodology.

Interesting: 0/0 • Support: 0/0Log in to vote

oversight

Verify the MSMT report lists at least $2.8 billion in cryptocurrency thefts attributed to DPRK actors during Jan. 2024–Sept. 2025.

Source summary

The U.S. and other members of the Multilateral Sanctions Monitoring Team highlighted a recent MSMT report documenting how the DPRK evades UN sanctions through malicious cyber operations and overseas IT worker activity. The 140-page report—built from previously non-public material from 11 UN member states and nine private firms—details large-scale cryptocurrency thefts (including at least $2.8 billion from Jan. 2024–Sept. 2025 and an additional $400 million in the three months after the report), networks for laundering and procurement in several countries, and DPRK IT workers operating in at least eight countries.

View original article →

Latest fact check

The U.S. State Department fact sheet on the MSMT’s cyber and IT worker report states that, based on that report, "DPRK cyber actors have victimized the cryptocurrency industry, stealing at least $2.8 billion from Jan. 2024 – Sept. 2025 from cryptocurrency companies and customers all over the world" through more than 40 heists.�a0This wording matches the claim almost verbatim.

Independent summaries of the MSMT report from reputable cybersecurity and crypto-analytics outlets further explain that MSMT attributes about $1.19 billion in crypto thefts to North Korean actors in 2024 and about $1.65 billion in the first nine months of 2025, totaling roughly $2.8 billion over January 2024–September 2025, consistent with the State Department’s description.�a0Although the underlying MSMT PDF is not easily searchable via this interface, multiple concordant secondary sources and the State Department’s direct citation indicate that the $2.8 billion figure and the stated time frame come from the MSMT report itself.

Verdict: True, because both the State Department and multiple independent summaries attribute to the MSMT report the finding that DPRK-linked cyber actors stole at least $2.8 billion in cryptocurrency from January 2024 through September 2025 worldwide.

Sources

Timeline

Update · Jan 13, 2026, 08:56 AMTrue
The U.S. State Department fact sheet on the MSMT’s cyber and IT worker report states that, based on that report, "DPRK cyber actors have victimized the cryptocurrency industry, stealing at least $2.8 billion from Jan. 2024 – Sept. 2025 from cryptocurrency companies and customers all over the world" through more than 40 heists.�a0This wording matches the claim almost verbatim. Independent summaries of the MSMT report from reputable cybersecurity and crypto-analytics outlets further explain that MSMT attributes about $1.19 billion in crypto thefts to North Korean actors in 2024 and about $1.65 billion in the first nine months of 2025, totaling roughly $2.8 billion over January 2024–September 2025, consistent with the State Department’s description.�a0Although the underlying MSMT PDF is not easily searchable via this interface, multiple concordant secondary sources and the State Department’s direct citation indicate that the $2.8 billion figure and the stated time frame come from the MSMT report itself. Verdict: True, because both the State Department and multiple independent summaries attribute to the MSMT report the finding that DPRK-linked cyber actors stole at least $2.8 billion in cryptocurrency from January 2024 through September 2025 worldwide.
Original article · Jan 12, 2026
View article

Comments

Only logged-in users can comment.

Loading…