The Justice Department disrupted cloud infrastructure supporting FaceStealer, a DPRK social-engineering campaign that uses stolen accounts, recorded webcam footage, deepfakes, and fake conferencing fixes to install malware and steal cryptocurrency. The campaign reportedly stole more than $400 million in 18 months and expanded from cryptocurrency and Web3 targets to open-source developers whose repository access could facilitate supply-chain attacks. Separately, North Korean military actors tracked as TraderTraitor stole more than $6 billion from Binance; authorities froze over $2.7 billion and obtained authorization to seize or restrain more than $1.2 billion while tracing continued laundering through bridges, mixers, and exchanges.