Since 2021, a North Korean-linked gang has conducted large-scale romance scams targeting Americans, defrauding them of billions through fake love stories and cryptocurrency schemes. This operation involves Cambodia’s Huione Group and is part of a broader cybercrime network with deep ties to ruling party elites in Cambodia, which has become a global hub for such scams in 2025. Concurrently, North Korean nationals have infiltrated Western and Fortune 500 companies, embedding young IT workers who engage in cyber espionage and cyberattacks, posing ongoing threats to IT infrastructure and sensitive data worldwide. Notably, North Korean hackers executed a single-day phishing attack that stole $137 million from TRON users on May 2, 2025. The TRON DAO X account was compromised through social engineering, leading to unauthorized contract postings and suspicious direct messages, with law enforcement involvement underway. This infiltration strategy extends to cybersecurity hiring processes, where North Korean operatives use sophisticated methods to bypass identity verification, further complicating efforts to counteract their activities. These cyber operations are believed to support North Korea’s missile funding efforts.