https://www.theregister.co.uk/2017/09/13/north_korea_swells_war_chest_with_bitcoin/

A North Korea appears to have commenced attacks aimed at acquiring Bitcoin so it can evade sanctions.

South Korea's Cyber Warfare Research Center alleged now FireEye threat researcher Luke McNamara writes that “Since May 2017, we have observed North Korean actors target at least three South Korean cryptocurrency exchanges with the suspected intent of stealing funds.” FireEye operatives have observed spearphishing that often “targets personal email accounts of employees at digital currency exchanges, frequently using tax-themed lures and deploying malware (PEACHPIT and similar variants) linked to North Korean actors suspected to be responsible for intrusions into global banks in 2016.”