North Korea’s Reconnaissance General Bureau directs a global cyber program that combines espionage and destructive operations with bank fraud, ransomware, ATM theft, and cryptocurrency theft. The article traces major operations including the Sony Pictures compromise, the Bangladesh Bank SWIFT theft, WannaCry, FASTCash raids, and an attempted intrusion at Chile’s Redbanc. Lazarus Group and related designations such as APT38, BeagleBoyz, and Hidden Cobra represent parts of an organizational structure whose precise boundaries remain unclear. Stolen funds help the DPRK evade sanctions and finance state priorities, including military and weapons programs.