North Korea’s Digital Surge: $2B Stolen in Crypto as Amazon Blocks 1,800 Fake IT Workers

North Korea’s digital surge is reflected in cryptocurrency thefts and a plentiful supply of fraudulent IT workers, with data from Chainalysis showing hackers stole more than $2 billion worth of cryptocurrency in 2025, a rise from 2024’s figure. The report also notes that a total of $3.41 billion in crypto was stolen between January and early December 2025, of which at least $2.02 billion is believed to have been taken by North Korean hackers.

Complementing these heists is a network of fake IT workers, with Amazon reporting the detection and blocking of 1,800 North Korean IT workers attempting to secure high-paying remote roles since April 2024. Amazon’s chief security officer, Stephen Schmidt, said their AI model analyses connections to nearly 200 high-risk institutions and verifies identities through background checks, credential verification, and structured interviews.

Chainalysis said this marks the most severe year on record for DPRK crypto theft in terms of value stolen, with DPRK attacks accounting for a record 76% of all service compromises. The company also notes the all-time total cryptocurrency stolen by North Korean actors has reached $6.75 billion, as insiders increasingly populate exchanges and other crypto entities.