Comment by tzone
14 hours ago
Lol, the title is so misleading. As more information is coming out, if the Cursor Claude extension really is the culprit here, these attack must have been in the works for god knows how long.
This level of targeting is really only something that nation state actors can pull off, who are also protected from actual law enforcement prosecution. Unless attackers are really in North Korea, they would 100% be caught within just few days.
For most governments 5 billion dollars is chump change compared to the possible reputational damage.
North Korea's GDP is $34B, so it absolutely isn't a chump change for NK's govt.
Estimates are that over the past few years, more than a third of the DPRK's foreign exchange income came from crypto. The legal exports were less than $0.5 bn, the rest is from more murky sources, including $1-2bn of crypto hacks in recent years.