$15.1 million in Crypto assets recovered: North Korea hacker group APT38's international crime network dismantled

The U.S. Department of Justice recently announced a major law enforcement achievement, successfully tracking down and initiating asset forfeiture procedures involving over $15.1 million in stolen USDT. These assets are closely linked to the notorious North Korean military hacking group APT38, which carried out large-scale attacks on four overseas Crypto platforms in 2023.

How the Hacking Organization Operates

APT38’s criminal methods are meticulously planned and clearly divided. The hacking group exploited infiltration techniques into American enterprises, successfully breaching the systems of 136 U.S. companies. To achieve this, the hackers employed identity theft and remote access methods, ultimately resulting in the personal information of at least 18 U.S. citizens being stolen, posing serious privacy and security threats.

International Crime Network Exposed

Investigations revealed that this case involved cross-border cooperation. Four U.S. citizens and one Ukrainian national voluntarily pleaded guilty, admitting they provided stolen identity information to North Korean IT personnel and helped host company laptops, acting as accomplices in hacking into American enterprises. This discovery exposes how international hacking organizations leverage local collaborators to expand their attack scope.

Law Enforcement Progress and Asset Recovery

The FBI(successfully seized the relevant funds in March 2025. The Department of Justice is seeking court approval for the forfeiture decision and plans to return the recovered crypto assets to the victims. This operation marks significant progress by international law enforcement agencies in combating hacking crimes and Crypto asset theft.

Warning Significance

This case serves as a reminder to Crypto asset users and businesses that the threat from hacking organizations is becoming increasingly complex and international. From Crypto platforms to corporate data security, from technical attacks to personnel infiltration, hackers have formed a complete criminal ecosystem. Individuals and organizations should strengthen security measures and remain vigilant against identity theft risks.