North Korea employs two main types of cyberattacks: hacking and ransomware. Elliptic's analysis mostly uncovered hacking -- stealing directly from cryptocurrency exchanges. Since it is uncertain whether a particular ransomware attack will be successful, North Korea is thought to be focusing its efforts on direct attacks on exchanges as one successful hack can bring in a huge haul of crypto assets. According to Elliptic, North Korea has stolen a total of $2.3 billion in cryptocurrency from businesses between 2017 and the end of 2022. Of that, Japan accounted for the largest portion, followed by Vietnam ($540 million), the U.S. ($497 million) and Hong Kong ($281 million). According to the Japan External Trade Organization, the $721 million stolen from Japan is 8.8 times greater than the value of North Korea's exports in 2021.