North Korean Cyber Adversaries Steal Billions from Financial Sector

• •North Korean adversaries stole billions in digital assets in 2025.
• •Hands-on-keyboard intrusions increased by 43% globally and 48% in North America.
• •Adversaries are using AI to enhance deception and evade traditional defenses.

In 2025, North Korean-linked adversaries stole billions in digital assets, significantly impacting the financial services sector. The CrowdStrike 2026 Financial Services Threat Landscape Report indicates a 43% rise in hands-on-keyboard intrusions globally, with a 48% increase in North America. These attacks leveraged AI to enhance deception techniques, allowing adversaries to exploit trusted identities and SaaS applications. The report emphasizes the urgent need for financial organizations to adopt AI-driven defenses to counteract these evolving threats. The report is based on intelligence from over 280 named adversaries, highlighting the growing sophistication of cybercrime in the financial domain.