Crowdstrike North Korean Cyber Adversaries Steal Billions from Financial Sector
Article Content
- •North Korean adversaries stole billions in digital assets in 2025.
- •Hands-on-keyboard intrusions increased by 43% globally and 48% in North America.
- •Adversaries are using AI to enhance deception and evade traditional defenses.
In 2025, North Korean-linked adversaries stole billions in digital assets, significantly impacting the financial services sector. The CrowdStrike 2026 Financial Services Threat Landscape Report indicates a 43% rise in hands-on-keyboard intrusions globally, with a 48% increase in North America. These attacks leveraged AI to enhance deception techniques, allowing adversaries to exploit trusted identities and SaaS applications. The report emphasizes the urgent need for financial organizations to adopt AI-driven defenses to counteract these evolving threats. The report is based on intelligence from over 280 named adversaries, highlighting the growing sophistication of cybercrime in the financial domain.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Continue Reading
Critical RCE Vulnerability in Confection WordPress Plugin (CVE-2026-115252) A critical vulnerability, CVE-2026-115252, has been identified in the Confection WordPress Cable plugin, affecting versions 0.4.0 to 0.4.7. This flaw allows unauthenticated attackers to execute arbitrary PHP code on the server by writing unmodified settings into a PHP file without proper checks. The vulnerability has… 
Critical RCE and LPE Vulnerabilities in Quest Foglight for Databases On November 3, 2026, the Zero Day Initiative disclosed multiple critical vulnerabilities in Quest Foglight for Databases, including six remote code execution (RCE) flaws and two local privilege escalation (LPE) vulnerabilities. The most severe RCE vulnerabilities, CVE-2026-92189 and CVE-2026-92190, allow…