North Korean cybercrime operator APT43 is using cloud computing to launder cryptocurrency, according to a report by cybersecurity service Mandiant. According to Mandiant, APT43 "uses stolen cryptocurrency to net crypto. APT43, which spies on South Korea, has engaged in illegal operations to raise money for the North Korean regime and to finance itself." Google's subsidiary Mandiant has been monitoring the North Korean Advanced Persistent Threat (APT) group since 2018.
APT43 Laundering Crypto Through Cloud Computing